DW 9.18 Release Notes

We are pleased to announce the release of Dynamicweb 9.18 with a focus on security.

Here's what's new:

• SNYK
  As part of our efforts of keeping Dynamicweb secure, we are now using security tools from Snyk for analyzing our entire code base. Snyk provides us with powerful tools to automatically detect and remediate vulnerabilities in our code, dependencies, and open-source libraries. By integrating Snyk into our development process, we can proactively address potential security issues before they impact operations, ensuring that Dynamicweb remains secure and reliable.
• Updated 3rd party dependencies
  The updated version of Dynamicweb 9 includes updates to all 3rd party dependencies (NuGet packages) used by Dynamicweb, bringing them to versions that have no known security vulnerabilities. You should encounter no significant functional changes stemming from this.
• NIS2
  The EU NIS2 Directive that will soon take effect requires organizations to keep their software up to date as part of their cybersecurity obligations. If your company is a critical or important entity under NIS2 directive, this update to Dynamicweb is important to be compliant with the rules.

In alignment with the NIS2 Directive's emphasis on enhancing cybersecurity across affected sectors, we encourage our customers to reinforce the login security of Dynamicweb to ensure robust protection of user accounts and sensitive data.  

NIS2 underscores the importance of implementing strong authentication mechanisms to safeguard access to network and information systems.  

Dynamicweb supports multi-factor authentication (MFA) through external login, secure password policies, and the encryption of login credentials.  

These measures significantly reduce the risk of unauthorized access, ensuring that your organization's operations are secure and compliant with the stringent requirements set forth by NIS2.  

We encourage you to adopt these security enhancements to fortify your defense against potential cyber threats.

Find information in our documentation on how to implement these measures:

• Enforcing password complexity and encryption of passwords
• Setting up MFA using external authentication with Microsoft

Here is a list of all work items included in this release: