Abnormal Blog

Modern account takeover starts with identity abuse, not exploits. Behavioral detection is essential once compromise unfolds after authentication.

From stolen session cookies to deepfakes your own mom would fall for, the tactics outsmarting enterprise security require a fundamental shift in how we think about protection.

Attackers are exploiting trust, identity, and routine workflows. Get an in-depth look at the tactics and techniques threat actors will be refining in 2026.

ClickFix attacks rely on user-initiated commands instead of malicious payloads, underscoring the need for behavior-driven detection in email security.

Real threat actors are using AI-powered tools like HTMLMIX to bypass email filters at scale. Here's how the tool works and how to defend against it.

Abnormal AI's and Cyera’s AI-native partnership advances email security, identity protection, and data loss prevention (DLP) to stop AI-driven attacks and reduce data exposure across cloud environments.

Mergers and acquisitions introduce email security gaps during integration. Learn how enterprises reduce email risk, maintain Day 1 protection, and protect deal value during complex transitions.

Attackers increasingly use Microsoft Teams messaging to deliver phishing and malware. Learn how automated detection and remediation stop threats before they move laterally.

SOC leaders reflect on the lessons that defined 2025, including behavioral detection, AI’s real role, analyst burnout, and modern security operations.

Explore how the OWASP Agentic Top 10 reframes AI security around autonomy, behavior, trust, and governance at scale.

Abnormal AI and CrowdStrike deliver defense-in-depth malware analysis for suspicious email attachments, enabling faster investigations and confident response without disrupting SOC workflows.

AI Phishing Coach delivers realistic phishing simulations using API-first delivery and lookalike domains to improve engagement and training outcomes.

Learn why behavior-based AI outperforms static rules in modern email security, reducing false positives while detecting sophisticated attacks.

Learn how to enhance AI Security Mailbox through a set of best practices that improve verdict explanations, personalize coaching, and streamline phishing-reporting workflows.

Discover how Abnormal’s improved Security Posture Management gives your team clearer insight into misconfigurations, posture drift, and high-impact fixes to proactively harden Microsoft 365 environments.

Explore how agencies can meet the PMA’s expectations by reducing operational burden, improving cybersecurity outcomes, and building architectures ready for AI-era threats.

Discover why non-traditional backgrounds make stronger SOC analysts and how AI amplifies their strengths in an era of fast-moving, human-targeted attacks.

Discover the eight essential email security capabilities every organization needs in 2026 to stay resilient against evolving AI-driven social engineering threats.

Discover Abnormal AI’s top 10 product innovations of 2025—from real-time email security coaching to major detection upgrades and M365 posture protection.

Discover practical strategies for breaking silos, including, aligning incentive structures, shared language, embedding AI governance early with product, engineering, and more.

AI-powered enhancements to Misdirected Email Prevention reduce misroutes, cut alert noise, and help prevent accidental data loss through outbound email.

Discover how the InboxPrime AI phishing kit automates scalable, believable email attacks and highlights the growing sophistication of AI-driven cybercrime.

Explore 2025’s most sophisticated phishing attacks—from DKIM replay to OAuth abuse and vendor impersonation—and how Abnormal’s behavioral AI stops them.

Static security training can’t keep up with modern threats. See how AI Phishing Coach delivers personalized, AI-driven coaching that evolves with attacker tactics.