Email Subscribe

Subscribe to our newsletter to receive updates on the latest attacks and new trends in the email threat landscape.

Homepage

Breadcrumbs

Abnormal AI provides advanced email security to prevent credential phishing, business email compromise, account takeover, and more.

Abnormal AI

Abnormal AI provides advanced cloud email security to prevent credential phishing, business email compromise, account takeover, and more.

What's New? Product Updates

description

security,privacy,email security,cloud email security,phishing protection

keywords

https://images.abnormalsecurity.com/production/images/blog/L_Whats-New_Open-Graph.png?w=1200&h=630&q=82&auto=format&fit=crop&dm=1761934528&s=1f5a6c375b1d978b7651c77775beffa8

referrer

robots

twitter:card

twitter:creator

twitter:description

https://images.abnormalsecurity.com/production/images/blog/T_Whats-New_Open-Graph.png?w=1012&h=506&auto=compress%2Cformat&fit=crop&dm=1761934531&s=cb1d798e5b3839211d481e540a6c4650

twitter:image

twitter:image:alt

twitter:image:height

twitter:image:width

twitter:site

twitter:title

{"title":{"title":"What's New? Product Updates | Abnormal AI"}}

Learn about recent enhancements, updates, add-ons, and new products in our AI-native email security platform.

What's New

Abnormal Named a Leader in Gartner® Magic Quadrant™

vs Mimecast

vs Avanan

Secondary CTA

Whether FormComplete is utilized on a form

FormComplete

CTA Display

What text is displayed on the primary CTA (see sheet for details on copy)

Primary CTA Text

Form Columns

chakra-ui-ChakraProvider

Button

EntriesCardWhatsNew

Select

BladesDynamicContentSections

Pagination

PagePropsProvider

Overlay

EmbeddedVideo

Divider

SocialShare

FormComponent

EntriesFilteringWhatsNew

WhatsNewMainPage

Footer

Container

OptionGroup

Option

Prose

HeaderSpacing

FormFields

SearchInput

Screen

PrimaryCtaText

FormColumns

CtaDisplay

VsMimecast

SecondaryCta

VsAvanan

Abnormal Solutions

react-awesome-reveal

lottie-react

date-fns

plasmic-nav

react-scroll-parallax-global

plasmic-embed-css

Abnormal Pages

Abnormal Careers

loading-boundary

plasmic-query

plasmic-basic-components

Abnormal Privacy/Legal

Abnormal Why Abnormal

Abnormal Landing Pages

react-aria

plasmic-rich-components

Abnormal Partners

Abnormal Products

Abnormal Design System

Abnormal Marketing

antd5 hostless

react-slick

AI Phishing Coach now supports customer branding across training content and communications. Simply upload your company's logo to the AI Phishing Coach settings to create a consistent branded experience for employees to recognize and more confidently engage with training. 
With this release:
<ul><li dir="ltr">Easy configuration in AI Phishing Coach Settings </li><li dir="ltr">Logos added across training pages and email comms</li><li dir="ltr">Official messages become easier for employees to trust and recognize</li></ul>
With recognizable branding, employees are more likely to engage and less likely to mistake legitimate training for phishing.

AI Phishing Coach

AI Phishing Coach now supports customer branding across training content and communications.

Customer Branding in AI Phishing Coach

Functional Release

AI Phishing Coach now uses API-first delivery to inject simulations directly into employee inboxes, removing setup friction, eliminating ghost clicks, and improving engagement by delivering during active hours. This update also introduces dynamic lookalike domains, moving beyond static domain limits to better mirror the subtle variations seen in real phishing attacks.
With this release:
<ul><li dir="ltr">API-first delivery improves reliability and reduces setup requirements</li><li dir="ltr">Targeted active-hour delivery lowers ignore rates and boosts engagement</li><li dir="ltr">Eliminates ghost clicks from security tools for more accurate reporting</li><li dir="ltr">More realistic phishing simulations using lookalike/typosquatted domains</li></ul>
By pairing seamless delivery with realistic domains, this update accelerates activation, boosts engagement, and delivers simulations that reflect real phishing techniques.

AI Phishing Coach now delivers simulations directly into employee inboxes and uses realistic lookalike domains for more authentic, effective phishing training.

More Realistic, Direct Simulations in AI Phishing Coach

Portal administrators can now define and save custom user roles within the RBAC (Role-Based Access Control) framework, making it easier to manage access across large security teams. Saved roles can be reused for onboarding new users or updating existing ones, eliminating the need to manually recreate identical permission sets for each team member.

This update streamlines user management, improves consistency, and supports scalable access control across enterprise environments.

To create and assign new custom roles:
<ul><li>Go to Settings &gt; User Management</li><li>Click Add User and + Create New Role</li></ul>
To monitor and manage roles:<ul><li>Go to Settings &gt; User Management</li><li>Click Roles </li></ul><img src="https://images.abnormalsecurity.com/production/images/RBAC-Saved-Custom-Roles.png?w=768&q=82&auto=format&fit=clip&dm=1759248276&s=968b2be2d3d16c51264bd51ae998a41e" alt="RBAC Saved Custom Roles" />

Platform

Create, save, and manage reusable RBAC custom roles across your organization.

RBAC Saved Custom Roles

We’ve expanded Security Posture Management with new GenAI Posture Explanations that make it easier to understand posture changes and identify configuration gaps with clarity.
With this release: 
• You can now view clear summaries that explain why a posture changed, what shifted in your configuration, and what that means for your security posture 
• You can also view the raw JSON before and after each change, giving deeper visibility into the exact updates made in your environment 
• Explanations and JSON views appear directly in the Drift Log, helping you diagnose configuration issues faster and reduce time spent reviewing posture data
These additions make it easier to understand posture changes, investigate configuration drift and close gaps with more confidence.
<img src="https://images.abnormalsecurity.com/production/images/MKT1130-Create-a-image-based-on-product-screenshot-1.png?w=768&q=82&auto=format&fit=clip&dm=1764707196&s=893572cd78a4f31b6712ac530d3451b8" alt="GenAI Posture Drift Explanations" />

Security Posture Management

New GenAI Posture Explanations that make it easier to understand posture changes

GenAI Posture Drift Explanations for Security Posture Management

Abnormal now proactively alerts when platform integrations fail, helping to prevent coverage gaps in Account Takeover Protection (ATO) and Security Posture Management (SPM) due to a failing connector.
These alerts are delivered via email and provide immediate visibility, clear troubleshooting guidance, and guaranteed delivery to help you resolve issues before they impact security coverage.
Recipients can be configured in Settings, but if no recipient is designated, notifications will automatically deliver to the Abnormal Global Admin to ensure receipt.

Account Takeover Protection

Get timely email alerts when platform integrations fail with detailed steps to remediate.

Platform Integration Alerts

Weekly Detection Enhancements - Week of November 14 and 21
<ul><li>Enhanced detection accuracy for sophisticated mortgage inquiry attacks, including improved sender/recipient frequency analysis and advanced redirect link detection. </li><li>Improved detection of suspicious URLs that use unicode for obfuscation. </li><li>Refined account takeover detection for VPN/proxy sign-ins and cloud app risk. </li></ul>

Detection

A weekly summary of detection enhancements delivered by the Abnormal engineering team.

Weekly Abnormal Detection Enhancements

Enhancement

We’ve expanded our Simulation and Video Training reports with new Job Title and Language fields, enabling deeper segmentation and more detailed analysis.
With this release: 
<ul><li>Admins now view and analyze performance metrics by Job Title, identify trends across specific roles and better understand how different segments of your workforce engage with simulations and training content. The addition of Language also provides clearer context for simulation delivery and user experience.</li></ul>
New metrics included: 
<ul><li>Simulation Report<ul><li>All data includes Language &amp; Job Titles</li><li>Failure Rate by Job Title</li><li>Report Rate by Job Title</li><li>Training Completion Rate by Job Title </li></ul></li><li>Video Training Report <ul><li>All Data includes Job Titles </li><li>Training Completion Rate by Job Title</li></ul></li></ul>
These additions make it easier to segment results by role, surface at-risk groups, and provide more detailed insights to admins.

We’ve expanded our Simulation and Video Training reporting workbooks with new Job Title and Language fields, enabling deeper segmentation and more detailed analysis.

New Job Title & Language Fields Added to AI Phishing Coach Reports

Use the new Source Platform filter to isolate Microsoft Teams detections in the Threat Log for faster triage and reporting.
With this release, you can quickly quantify Teams-based risk and focus investigations:
<ul><li dir="ltr">In the Abnormal Portal, go to Threat Log (Teams attacks appear alongside email detections). </li><li dir="ltr">Open Filters, select Source Platform, and choose Microsoft Teams to narrow the view to Teams threats. </li><li dir="ltr">Review the filtered results; click into Threat Details for analysis context and next steps.</li></ul>
This filter is available to customers with Microsoft Teams Messaging Security.

Messaging Security

Quickly find and triage Microsoft Teams detections in the Threat Log with the new Source Platform filter.

Filter Microsoft Teams Threats in the Threat Log

The Enhanced Video Training Reporting Workbook replaces the Video Training CSV with a multi-tab Excel workbook that gives admins deeper insight into engagement and completion, eliminating manual data manipulation.
With this release:
<ul><li dir="ltr">Ready-to-use format that simplifies reporting and accelerates insight generation</li><li dir="ltr">Segmented views by Department, Manager, Office, and Country for deeper analysis</li><li dir="ltr">Prebuilt tabs showing Trainings Assigned, Trainings Completed, Completion Rate, Overall Completion Rate, and Variance</li></ul>
The new reporting workbook helps admins quickly identify training gaps, track progress, and improve completion rates across global teams.

The Enhanced Video Training Reporting Workbook replaces the Video Training CSV with a multi-tab Excel workbook that delivers actionable insights into engagement and completion for admins.

Enhanced Video Training Reporting Workbook

Admins can now automatically tag users as VIPs by selecting existing Microsoft 365 groups. Once configured, VIP status updates dynamically as users are added to or removed from the group, eliminating manual updates and keeping VIP designations aligned with how organizations already manage access. This makes it easy to scale executive protection and ensures ongoing accuracy with minimal effort. 
To manage VIP's:
<ul><li>Go to Settings &gt; VIP Management</li><li>Click Manage VIPs</li></ul>

Admins can now automatically tag users as VIPs by selecting existing Microsoft 365 groups.

Groups for VIP Management

The new Executive Dashboard empowers security and awareness leaders to visualize program performance and gain a deeper understanding of their organization’s human risk posture. It brings key metrics together in an interactive dashboard to track risk trends and progress over time.
With this release:
<ul><li dir="ltr">Gain centralized visibility into simulation results and program performance.</li><li dir="ltr">Understand employee behavior from email open to report or failure.</li><li dir="ltr">Track phishing susceptibility to demonstrate measurable program impact.</li></ul>
New metrics include:
<ul><li>Simulation Failure Funnel: Tracks user engagement from email open to failure or training completion.</li><li>Simulation Report Rate: Measures user reported simulated phishing emails.</li><li>Training Completion Rate: Measures completion rates across assigned trainings.</li><li>Failure Rate by Attack Type: Shows phishing susceptibility by phishing types over time.</li><li>Report Rate by Attack Type: Shows how often users report each phishing type over time.</li><li>Training Effectiveness by Cohort: Measures how employees who completed training last month performed in this month’s phishing simulations</li><li>Top VIPs Failing Simulations: Identifies VIPs with the most simulation failures.</li></ul>
The Executive Dashboard helps organizations visualize human risk, uncover behavioral trends, and clearly communicate awareness program impact to leadership.

The new Executive Dashboard empowers security and awareness leaders to visualize program performance and gain a deeper understanding of their organization’s human risk posture.

AI Phishing Coach Executive Dashboard

Admins can now export submissions from the “Not Analyzed” tab for deeper review. The export supports both Download in Browser and Send Download to Email, and includes a new Reason for No Analysis column for added context.
To export "Not Analyzed" submissions:
<ol>
<li>
Go to Submissions &gt; Not Analyzed
</li>
<li>
Click Download Spreadsheet</li></ol>

AI Security Mailbox

Admins can now export the submissions displayed in the “Not Analyzed” tab.

Export “Not Analyzed” Submissions from AI Security Mailbox

Weekly Detection Enhancements - Week of November 7 
<ul><li>Expanded safe sender logic for graymail detection</li><li>Implemented enhanced localized language detection in German and Japanese language</li><li>Introduced malicious calendar invite remediation for Microsoft 365</li></ul>

Emails sent to the wrong recipient are a leading cause of accidental data loss and the most frequently reported GDPR violation. These mistakes expose organizations to significant security, compliance, and reputational risks.Traditional DLP tools often miss these mistakes, relying on rigid rules and content inspection.
Abnormal’s new Misdirected Email Prevention (MEP) uses behavioral AI to detect misaddressed emails and mis-attached files by analyzing recipient context and communication patterns—no rules or policies required. When an issue is detected, MEP automatically blocks the message, routes it to Microsoft quarantine, and alerts the sender with details and guidance to self-remediate, removing the operational burden from the SOC team. 
Easy to deploy, MEP brings immediate, centralized protection that reduces the risk of accidental data loss, all within the Abnormal platform. Now Available.

Misdirected Email Prevention

Protect against accidental data loss using behavioral AI that detects and prevents misdirected emails before delivery.

Announcing Misdirected Email Prevention

Major Release

The Enhanced Reporting Workbook replaces the Simulation Report CSV with a multi-tab Excel workbook that gives admins actionable insights, eliminating manual data manipulation. 
With this release:
<ul><li dir="ltr">Ready-to-use format that simplifies reporting and accelerates insight generation</li><li dir="ltr">Segmented views by Department, Manager, and Office for deeper analysis</li><li dir="ltr">Prebuilt tabs for All Data Export, Top Failing Users, Top Reporting Employees, and Training Completion Rates</li></ul>
The new reporting workbook helps admins quickly spot trends, measure performance, and improve training programs across global teams.

The Enhanced Reporting Workbook replaces the Simulation Report CSV with a multi-tab Excel workbook that delivers actionable insights and simplifies analysis for admins.

Enhanced Simulation Reporting Workbook

Abnormal now supports the promotions folder as a nested folder across both M365 and GWS, allowing end users to move it anywhere in their mailbox. End users can also now rename their Promotions folder directly within their mailbox. Together, these updates give users greater flexibility and control over how they organize their mailboxes.

Email Productivity

End users can now move their Promotions folders anywhere in their mailbox.

Nested Folders for Graymail

Weekly Detection Enhancements - Week of October 31
<ul><li>Increased precise of detection of lookalike threats, reducing missed attacks.</li><li>Improved detection of impossible travel events in Account Takeover Protection</li><li>Enhanced accuracy of VPN identification in Account Takeover Protection </li><li>Enhanced ability to identify obfuscated malicious content in emails.</li></ul>

Inbound Email Security

<h4>URL Rewriting now provides deeper visibility into how and why links are protected. With new explainability features and detailed click-event data, Abnormal makes link protection more transparent for users and more powerful for security teams.</h4>
<h4>With this release:</h4>
Enhanced Explainability
<ul>
<li>
Shows the reason a URL was rewritten to build user trust and reduce false-positive perception
</li>
<li>
Displays context in the Click Tracking Dashboard, end-user warning page, and SIEM Clicked Events
</li>
</ul>
Clicked Events for SIEM
<ul>
<li>
Publishes standardized click-event data, including user, link, and threat details
</li>
<li>
Delivers richer telemetry for investigation, automation, and real-time monitoring
</li>
</ul>
Together, these enhancements make link protection easier to understand, investigate, and act on, helping teams respond faster and with greater confidence.

We’ve introduced new capabilities that make investigations faster, link protection more transparent, and threat response more data-driven.

URL Rewriting: Enhanced Explainability

<h4>Abnormal judgments now appear alongside Microsoft’s in the Quarantine Release view, helping analysts make faster and more confident release decisions directly in Search &amp; Respond.</h4>
<h4>With this release:</h4>
<ul><li>Side-by-Side Judgments: View Microsoft and Abnormal judgments together for each quarantined message</li>

<li>Abnormal Scoring for Microsoft Quarantine Messages: Applies Abnormal’s behavioral scoring to all Microsoft Quarantine messages</li>

<li>Filtering by Abnormal Judgment: Filter quarantined messages by Abnormal judgment, such as Safe, Suspicious, or Malicious</li></ul>
Broader Time-Based Searches in Search &amp; Respond for All Abnormal Messages
<ul>
<li>
Filter messages by Received Time only, without adding sender, subject, or recipient filters
</li>
<li>
Run broad, time-based queries for audits, investigations, and forensics with ease</li></ul>
These enhancements extend Abnormal’s single pane of glass for email investigation, reducing time to decision and increasing confidence across Microsoft 365 environments.

Abnormal judgments now appear alongside Microsoft’s in the Quarantine Release view, helping analysts make faster and more confident release decisions.

Quarantine Release with Abnormal Scoring

<h4>Inbox Insights is now Email Digest, offering clearer context and a cleaner experience for end users. The update adds sender and subject details, simplifies long sections, and delivers a more intuitive format that makes digest reviews faster and easier.</h4>
<h4>With this release:</h4>
<ul><li>Rename: Inbox Insights to Email Digest: Introduces a clearer, more user-friendly name</li>

<li>More Context for End Users: Adds sender and subject details to daily and weekly digests</li>

<li>Concise by Design: Displays up to 50 remediated emails per section for easier review</li>

<li>De-branded Experience: Removes product branding from subject and body to reduce confusion</li></ul>
These improvements make digests more useful and approachable for every user, helping organizations drive greater engagement and clarity in email security notifications.

Inbox Insights is now Email Digest, offering clearer context and a cleaner experience for end users.

Email Digest: Evolving from Inbox Insights

<h4>Calendar invites have become a new phishing vector. Abnormal now automatically removes malicious or unwanted events linked to remediated emails, helping organizations maintain clean, trusted calendars.</h4>
<h4>With this release:</h4>
Automatic Removal of Malicious Calendar Invites
<ul>
<li>
Detects and deletes .ics and embedded calendar events tied to remediated messages
</li>
<li>
Removes malicious and unwanted calendar invites from end-user calendars
</li>
</ul>
New Calendar Invite Attack Insight
<ul>
<li>
Surfaces calendar-based attack activity directly in the Threat Log for faster investigation
</li>
</ul>
By extending remediation to calendar events, Abnormal closes a common phishing gap and ensures Microsoft 365 environments stay safer and easier to manage.

Calendar invites have become a new phishing vector. Abnormal now automatically removes malicious or unwanted events linked to remediated emails

O365 Calendar Invite Attack Remediation

Security Posture Management now includes coverage for Microsoft Defender and Purview, expanding protection across key Microsoft 365 security and compliance tools. 
With this release, SPM:



<ul><li>Detects configuration drift across Microsoft Defender and Purview environments</li><li>Delivers deeper insight into Microsoft 365 security alignment and compliance gaps</li><li>Reinforces your ability to continuously monitor and maintain a strong M365 security posture <img src="https://images.abnormalsecurity.com/production/images/Screenshot-2025-11-21-at-2.44.38-PM.jpg?w=768&q=82&auto=format&fit=clip&dm=1763761443&s=fc13be8fc2c76c73adb4e1a1b48d062d" alt="" /></li></ul>

Security Posture Management now includes coverage for Microsoft Defender and Purview, expanding protection across key Microsoft 365 security and compliance tools.

New Coverage for Microsoft Defender and Purview in Security Posture Management

AI Phishing Coach now delivers phishing simulations and just-in-time coaching in employees’ preferred languages, creating a more inclusive and effective training experience for global teams.
With this release:<ul><li>Automatic language detection from GWS or M365 user profiles</li><li>Localized simulations, just-in-time coaching, and email reminders</li><li>Delivers seamless, inclusive training experiences for global teams</li></ul>
By localizing phishing simulations and training, AI Phishing Coach helps organizations engage employees worldwide, increase understanding, and strengthen security culture across every region.

AI Phishing Coach now delivers phishing simulations and just-in-time coaching in employees’ preferred languages, creating a more inclusive and effective training experience for global teams.

Multi-language Simulations & Coaching

The revamped Simulation Settings Page introduces a smarter, more flexible way to manage simulations. Admins can now fine-tune frequency, targeting, and content through an intuitive, self-service interface.
With this release:
<ul><li dir="ltr">Streamline setup with intuitive controls and guided defaults </li><li dir="ltr">Clear visibility into simulation cadence, audience targeting, and email signatures </li><li dir="ltr">Self-service tools to fine-tune simulation schedules, exclusions, and training content</li></ul>
These new capabilities empower admins with greater control and flexibility, enabling faster onboarding and easier scaling across the organization.

A revamped Simulation Settings experience gives admins greater controls over simulation cadence, targeting, and training content while accelerating onboarding and scaling across the organization without sacrificing autonomy or personalization.

Revamped Simulation Settings in AI Phishing Coach

Simulation Guidelines give admins intelligent, AI-powered control over phishing simulations through simple natural language prompts. Admins can direct the system to prioritize or exclude specific content to ensure every campaign aligns with organizational goals and security priorities.
With this release:
<ul><li dir="ltr">AI-powered simulation control that refines which simulations are delivered or excluded </li><li dir="ltr">Flexible inclusion and exclusion of training topics, difficulty levels, or behavioral themes </li><li dir="ltr">Adaptive optimization that updates Auto-pilot’s simulations based on admin feedback</li></ul>
By combining human guidance with AI intelligence, Simulation Guidelines help organizations deliver phishing simulations that are relevant, compliant, and on-brand while keeping administration effortless and efficient.

An AI-driven way to refine simulation selection. Admins can use natural language prompts to guide training content to prioritize or avoid based on organizational goals.

AI-powered Simulation Guidelines

Weekly Detection Enhancements - Week of October 24
<ul><li>Enabled more accurate detection of attacks leveraging links in subject lines</li><li>Improved campaign group correlation logic for attacks with similar characteristics</li></ul>
Other Velocity Enhancements <ul><li>Enabled faster and more flexible message search and review in Search and Respond, with "date" as the only required selector</li></ul>

Admins can now view each employee’s simulation status along with their Manager, Department, and Office Location directly in the AI Phishing Coach UI or via CSV export. These expanded metrics unlock richer visibility into training performance across every level of the organization.
With this release: 
<ul><li dir="ltr">Get clear visibility into phishing simulation performance across your organization</li><li dir="ltr">Easily track employee progress and completion with a new coaching status</li><li dir="ltr">Uncover trends by manager, department, or location to pinpoint areas for improvement</li></ul>
This enhancement empowers admins to better understand and strengthen their organization’s security readiness.

This release expands reporting to include each employee’s simulation status along with their manager, department and location to help identify trends, measure training impact and strengthen organizational security readiness.

Expanded Reporting Metrics for AI Phishing Coach Simulations

Weekly Detection Enhancements - Week of October 17
<ul><li>Improved campaign consistency and message grouping, ensuring similar executive impersonation attack campaigns are grouped and remediated reliably.</li><li>Improved vendor fraud detection for lookalike domains.</li><li>Improved detection of password spray attacks in Account Takeover Protection.</li><li>Enhanced Okta integration to enable enhanced processing of authentication signals in Account Takeover Protection. </li></ul>

Employees will now experience realistic credential phishing simulations for popular platforms like Google, Microsoft, LinkedIn, X, Apple, Stripe, and GitHub. This new capability goes beyond tracking clicks—identifying who is actually willing to enter credentials and expose real breach risk, then turning those moments into instant training opportunities.
With this release:
<ul><li dir="ltr">Employees experience authentic credential phishing pages that mimic real-world logins </li><li dir="ltr">Automatic failure triggers when credentials are entered or sharing intent is detected </li><li dir="ltr">Just-in-Time coaching and credential phishing quizzes appear immediately after failure</li></ul>
Credential Phishing helps employees recognize credential harvesting attacks and reinforces safer security habits for lasting behavior change.

Realistic credential phishing simulations expose behaviors that lead to breach risk, turning those high-risk moments into instant, personalized training that builds safer security habits and lasting behavior change.

Credential Phishing Now in AI Phishing Coach

Weekly Detection Enhancements - Week of October 10<ul><li>Enhanced phishing simulation detection for training emails</li><li>Reduced false positives in claims-related email detection</li><li>Reduced false positives for legitimate voicemail-to-email notifications</li><li>Improved detection of account compromises through internal email analysis</li><li>Enhanced detection of attacker-controlled phone scams utilizing uncommon top-level domains</li><li>Strengthened identification of impersonation attacks targeting non-Outlook environments</li></ul>

Upload, generate, and begin training in just 30 minutes. Now available to customers, this feature leverages AI to generate branded video training content—no Abnormal support required. Simply upload your company’s logo and a short description to generate branded training videos—ready to use in minutes.
How to Configure:
<ol><li dir="ltr">Go to Settings, Select AI Phishing Coach.</li><li dir="ltr">Underneath Generate Video Training Content, upload your company logo and a short description.</li><li dir="ltr">Save changes to generate training videos automatically.</li><li dir="ltr">After 30 minutes, preview your videos and begin scheduling trainings for employees.</li></ol>

Create branded training videos in minutes—just upload your logo and a short description. Available now, this AI feature lets you upload, generate, and start training in under 30 minutes.

Self-Service Video Training Generation in AI Phishing Coach

Security awareness admins can now access an audit log of AI Phishing Coach simulation reports for reliable, on-demand visibility. Reports are generated asynchronously, ensuring access whenever needed. The audit log provides a full history of simulation activity, making it easy to review past reports or generate new ones with confidence. This enhancement streamlines compliance and cyber insurance workflows, giving admins more flexibility and control in managing training report data.

Security awareness admins can now generate and access an audit log of AI Phishing Coach simulation reports for reliable, on-demand visibility.

Audit Log for AI Phishing Coach Simulation Reports

Security Posture Management now provides exposure impact and time-to-fix insights directly in Posture Details. Teams can evaluate not just the risk of an issue, but also the consequences of exposure and how long remediation is likely to take.
With this release:
<ul><li dir="ltr">Exposure impact highlights the business and security consequences of each posture </li><li dir="ltr">Time-to-fix estimates help teams understand remediation timelines </li><li dir="ltr">Risk, exposure, and time context are shown together for more effective prioritization These insights give customers a more complete picture of remediation priorities, helping them act quickly, align across teams, and drive measurable outcomes. <img src="https://images.abnormalsecurity.com/production/images/MKT1083-Posture-Priority-Assessment_L2R1.png?w=768&q=82&auto=format&fit=clip&dm=1759236674&s=3cb1fdcedbf19e7a626e5e93eaa37d2c" alt="Priority Assessments in SPM" />
 </li></ul>

Security Posture Management now provides exposure impact and time-to-fix insights directly in Posture Details. Teams can evaluate not just the risk of an issue, but also the consequences of exposure and how long remediation is likely to take.

Priority Assessment & Improved Risk Filtering in Security Posture Management

We’ve extended Role-Based Access Controls (RBAC) beyond VendorBase to PeopleBase, AppBase, TenantBase, ThreatIntelBase, giving administrators granular visibility and permission controls.
Why it matters:
<ul><li dir="ltr">Enhanced Security: Limit Knowledge Base access by role or team</li><li dir="ltr">Improved Compliance: Aligns with least-privilege and governance standards</li><li dir="ltr">Flexible Access: Configure permissions per Knowledge Base</li></ul>

We’ve extended Role-Based Access Controls (RBAC) beyond VendorBase to PeopleBase, AppBase, TenantBase, ThreatIntelBase, giving administrators granular visibility and permission controls.

RBAC for Knowledge Bases

Powered by the combined work of our machine learning engineers and detection team, we’ve made significant improvements to our detection accuracy.
Smarter Core Models
Our core detection models now leverage 50% more features and advanced architectures, enabling proactive identification of more than 30,000 additional attack campaigns each week, without increasing false positives.
Expanded Phishing Coverage
We’ve added 27 new detectors for internal impersonation, brand impersonation, and compromised sender attacks. These updates are already blocking over 60,000 additional phishing attempts weekly and have reduced missed detections by 30%.
Stronger Campaign Consistency
Campaign consistency has been extended beyond ATTACK and SPAM to also include SAFE and GRAYMAIL. This delivers a 4% improvement in AI Security Mailbox consistency and a 1% boost in message campaign consistency, ensuring more reliable classification across all message types.
These enhancements reflect our ongoing investment in people and AI-enabled systems, expanding protection against evolving attacks while keeping operations efficient and burden-free for security teams.

Powered by the combined work of our machine learning engineers and detection team, we’ve made significant improvements to our detection accuracy.

Detection Accuracy Enhancements

AI Phishing Coach now delivers annual training as a library of micro-learning videos that are easy to digest, drive higher engagement, and improve knowledge retention. Instead of one long video, employees complete five focused trainings on the topics customers ask for most—Introduction, Threat Awareness, Emerging Threats, Ethical &amp; Social Responsibility, and Best Practices. This shift reduces fatigue, increases completion rates, and ensures employees retain critical security concepts more effectively.

AI Phishing Coach now delivers annual training as a library of micro-learning videos that make content digestible, boost engagement, and strengthen retention.

Micro-Learning Video Library

You can now integrate Microsoft Teams Messaging Security in just one click, making it faster to protect Teams messages from malicious content.
With the new One-Click Integration:
<ul><li dir="ltr">Onboard Messaging Security with a simple, secure one-click flow – no manual scripts or multi-step setup required</li><li dir="ltr">Microsoft per-message charges are eliminated → no added cost for you</li><li dir="ltr">Deploy in minutes</li></ul>
Existing Messaging Security customers need to re-integrate using the One-Click Integration to access upcoming Messaging Security enhancements, including protection with no Microsoft per-message charges and Manual Remediation.
This capability is available to all new and existing Messaging Security customers at no additional cost. Please reach out to your Abnormal Representative for guidance on getting started.

Explore Microsoft Teams Messaging Security <a href="https://abnormal.ai/products/messaging-security">here</a>.

Integrate Microsoft Teams Messaging Security in one click to quickly protect your Teams environment from malicious content.

Nonstop Innovation. That’s Abnormal.

Get the Latest Insights

Nonstop Innovation. That’s Abnormal.

Get the Latest Insights