Is there a document showing which versions of FMS are fully patched?
I have a client who is still on FMS 21 and is super busy at the moment. I could run the FMS installer, and most times that's all I need to do. But if the FMS installer barfs, them I'm in for a possibly long day...at least longer than the slow FMS installer itself would be.
Would "upgrading" to FMS 2026 be better supported? I'm concerned that these AI threats go around "strong passwords" and "2FA" and instead just focus on vulnerabilities. Claris seems to me to be very slow at patching anything so I'm not feeling very "safe" in the light-speed AI threats that are increasing seemingly daily.
With the AI threat landscape now, I'm not sure any server is safe for very long.
26.0.3 has all the latest security updates - I've been running it in production for a while now without issue.
The following blog provides some testing that you can run against your server to see if has exposed vulnerabilities.
Oddity is a free tool that will scan MacOS for vulnerabilities.
Credentials appear to be a primary target of the current attacks (not just FM, but everything). Replace any login with the string ADMIN, DEMO, TEST, USER, etc. that could be easily guessed - in both your solutions and admin console. Check your access logs. Remove all auto-login accounts, do not use GUEST, and add the admin console feature that only lets people see what they have valid credentials for. If you can, use external authentication - that makes the current attack vectors far more difficult to exploit.
Here is an AI skill that will help with FM security testing.
FMFathom.com has added some security check features. The BETA is free.
Soliant just published a checklist of things to make sure you have done to tighten down security for FMP/FMS
