%20(1080%20%C3%97%20608%20px)%20(4).png)
What changed, what’s new, and what's next. Built for executives and IT pros who run PhishFirewall.
Only released items appear here. These are live in your tenant and ready to use.
Admins needed a fast way to send training or announcement templates.
Bulk send from any template with filters (department, location, risk tier, completion status).
Speed of communication, coverage during incidents, and reduced admin lift.
Users without baseline data did not match the risk definitions of other users. Missing oppertunities to mitigate risk within that population.
A distinct Unknown risk category for data-less users, visible in dashboards and reports.
Clarifies exposure and provids a vehicle to mitigate risk.
Company specific branding can increase trust and engagement with training emails and landing pages.
Phase 1 branding: custom logo and color, modified across training emails, and landing pages.
Aligns security communications with company identity, improving credibility and preformance.
Lighter updates that improve workflow and clarity. Already available in your tenant.
You can reuse an existing Azure (Entra ID) connection to spin up a new tenant, enabling quicker setup and cleaner segmentation.
Many of Lora’s follow‑up emails are now more concise, improving readability and reducing email fatigue.
The Phish Report button now shows a clearer confirmation when a message is reported.
Phish reports now appear as actions in Mailing and Action History, alongside sends, opens, and clicks.
Directionally prioritized items our team is working on. ETAs and details may shift as we learn.
A users lack of awareness can contribute to a lack of preformance.
Measured preformance indicators and instructions how to improve will help the user self-manage.
Empowers users to take ownership of their security behaviors, turning results into sustained improvement over time.
Anomalous user behaviors and repeated failures are hard to catch without time‑consuming manual reviews.
Automated exception detection reports that flag outliers.
Isolate trends so admins can intervene and escalate.
Phishing feels abstract, so users underestimate the real threats actively targeting their own organization.
Enable sharing of anonymized, safely rendered images of real phish reported by employees—so everyone can see and learn from live threats.
Makes risk tangible, reinforces the value of reporting, and builds a culture of shared vigilance.
Content may have unique needs and exceptions for individual companies, or tenants.
Flexible editing tools for training modules and phishing templates.
Keeps content relevant and effective while maintaining consistency with company culture and compliance standards.
Roadmap and timelines are directional. Priorities may change.
Learn about the biggest news in cybersecurity for the month of august.
Curated for August 2025
Voice-phishing to approve a malicious connected app enabled CRM data exports—impacted orgs include Cisco, Google, and Workday.
Action: call-back verify requests; restrict who can install connected apps; monitor OAuth grants; never run exports from inbound calls.
Booby-trapped archives can drop executables into autorun paths and launch on login.
Action: patch to WinRAR 7.13+; block risky archive types; warn users not to open unexpected .rar/.zip files.
Scaled SMS/RCS lures + real-time OTP capture add stolen cards to mobile wallets for instant spend.
Action: mobile-first training: don’t tap links in texts; use official apps; monitor wallet additions and enable transaction alerts.
Grab a slot for a quick admin walkthrough, feature enablement help, or Q&A.
If the scheduler doesn’t load, open it in a new tab.