2025

18 March

New Features:

• Added Preferred Language info to all Campaign Manager tables.

• Added Georgian and Romanian language support across all products and Company settings.

• Added new compliance options to Awareness Educator.

  • CCPA

  • TISAX

  • DORA

  • Public CPD

• Added new behavior options to Awareness Educator to expand content classification and training relevance.

  • Bypass SMS-based MFA through social engineering

  • Not installing critical patches and delaying updates

  • Leaving an unlocked device unattended in meeting rooms

  • Using weak passwords that are easy to guess

  • Using public USB charging stations, exposing devices to “juice jacking” attacks

  • Falling for social engineering scams, such as fake IT support calls

  • Connecting work devices to unsecured Wi-Fi networks via personal hotspot

  • Sending sensitive information to the wrong recipient due to autocomplete errors

  • Leaving confidential documents unattended in shared office spaces

  • Keeping background applications open when sharing screens in meetings

  • Failing to deactivate accounts of former employees

• Added new categories to Awareness Educator and Phishing Simulator to enhance training and simulation content variety.

  • Cloud Security

  • Insider Threats

  • Incident Response

  • AI/ML Security

  • IoT Security

  • Deepfake & Synthetic Media

  • AI-Powered Threats

  • Ransomware & Extortion

  • Zero Trust Architecture

  • Biometric Security

  • Supply Chain Attacks

• Added custom header to all outgoing emails to prevent link rewriting by email security tools.

• Added a new feature, Hyper-Personalization, that sends scenarios based on users' preferred language for one-time campaigns.

• Ribbon Add-in support has been added, featuring multi-language capabilities and a feedback mechanism that enables user input through predefined options.

Improvements:

• Disabled the "Add Users to Group" action for SCIM-integrated groups to prevent manual user additions.

• Restricted AI Ally from using unsupported merge tags in generated email templates.

• Updated AI Ally popover in Phishing Simulator to show if Preferred Language is used in Hyper-Personalization.

• Removed the Stop Bot Activity (A4) rule from Opened Email tabs to prevent confusion.

• Optimized Ribbon Add-in by removing unnecessary permissions to improve security.

• Improved error messaging for DEC test emails by displaying a clear notification when the recipient does not match the connected account.

• Removed the "Add Members" section from the Company Group edit screen to prevent data inconsistency issues.

• Removed "All Languages" option from Preferred Language in Company settings and defaulted to English where applicable.

• Improved the error message shown when trying to re-add an existing company to a group.

• {COMPANYLOGO} merge tag was improved to display the Notification Template Logo defined in White Labeling settings.

Bug Fixes:

• Fixed issue where the First Completion column showed a date for users who had not completed the training.

• Fixed issue where downloading Reminder or Enrollment Emails from the Sending Report screen in Awareness Educator resulted in an error.

• Fixed issue where importing users from file caused an error due to missing Preferred Language column.

• Fixed issue where notify message appeared in the edit popup even when notification was not selected.

• Fixed issue where manually editing the Date Range in Executive Report caused widgets to display no data.

• Fixed an issue where creating a new instance for a campaign with an attachment method scenario caused an error in the Campaign Manager.

3 March

New Features:

• Made the SAML Settings "Entity ID" dynamic with a unique 6-digit random value for new configurations.

• Added "X-MS-Exchange-Organization-BypassFocusedInbox" header to emails sent via SMTP and DEC for Focused Inbox delivery.

• Added informative pop-up notifications for bulk actions, providing real-time updates on process status and completion.

• Added support for detecting and analyzing IPv6 addresses as Sender IPs in reported emails within Incident Responder.

• Added a new column in Awareness Educator Enrollment reports to display the first completion date of training.

• Added a "Preferred Language" field to Target Users, ensuring that selected content is delivered in the preferred language of users within the target group if a match exists.

• Added a Severity column to the Sent Attack table in Email Threat Simulator for easier visibility and filtering.

Improvements:

• Separated English into English (UK) and English (US) in Awareness Educator Language settings.

• Stop Bot Activity feature improved by distinguishing between users who failed the challenge and those who did not enter the challenge.

• Updated VirusTotal integration to display a specific message when the request limit is exceeded.

• Updated Landing Page settings to have Stop Bot Activity enabled by default for new pages and activated for all system templates.

• Renamed "Invisible Captcha" to "Stop Bot Activity" in Campaign Manager's Landing Page selection screen and table for better clarity.

• Disabled the ALT + L shortcut in the Add-in to prevent conflicts with the Polish "Ł" character input.

• Updated Users with Highest Risk Score widget to exclude deleted users.

• Updated Vishing Distribution settings to display Company Timezone instead of User Timezone in the Send Calls Between field.

Bug Fixes:

• Fixed issue in Incident Responder where selecting "Select All" in Reported Emails and attempting an edit action resulted in a 400 Bad Request error.

• Fixed issue where the Target Group count appeared as 0 in campaigns, despite users being included.

• Fixed issue where user details appeared empty when editing a user from the Target Group screen.

• Fixed issue in "Add Users to Group" where performing a search resulted in an error.

• Fixed issue in the Recent Campaigns widget displaying incorrect or missing data based on campaign type.

• Fixed issue where filtering in the Target Group user addition table resulted in an error.

• Fixed issue where added tags were not displayed in the Company table.

• Fixed issue where adding a user to a Target Group resulted in an error.

• Fixed issue in Campaign Manager where using "Don't" caused an error due to the apostrophe.

• Fixed issue in Phishing Simulator Scenario where deleting Page 1 in Create Landing Page redirected instead of deleting.

• Fixed issue where EULA link updates in Whitelabeling settings were not applied.

• Fixed issue causing an Unauthorized error when adding a new SMTP configuration.

• Fixed issue in Reported Emails where filtering emails with empty subjects displayed incorrect results.

• Fixed issue where Learning Path Enrollment Reminder was displayed as Enrollment Reminder in the Summary screen.

• Fixed FortiSandbox integration to ensure "DATA_IN_QUEUE_OR_PROGRESS" status continues scanning instead of being marked as an error.

17 February

New Features:

• Added a new number to Callback Simulator.

• Added filtering in the Companies table to list companies exceeding their User Limit.

• Added support for the Malay language.

• Added "Board Members" as a role option in Awareness Educator.

• Added "Preferred Language" field to Target Users, allowing manual selection.

• Added AI Ally integration to the Create Email Template and Create Landing Page Template sections in Phishing Simulator, allowing AI-generated content without navigating to separate pages.

• Added an info card in Smishing Target Groups to notify users when selected groups contain unverified domains, ensuring clarity on actual recipient count before sending.

• Added a "Tags" field when creating a new company, allowing users to label companies and filter or search by tags in the Companies table.

Improvements:

• Upgraded VirusTotal integration to API v3 to ensure compatibility and prevent errors when setting up new integrations.

• Increased the size of the email and landing page code editor for better readability and ensured responsive behavior across different screen sizes.

• Ensured URL Redirect and QR Analysis APIs are only triggered for users with an Incident Responder (IR) license, preventing unnecessary API calls for non-licensed users.

• Updated SMS text in Awareness Educator by changing "please enroll it on" to "please enroll via this link."

• Implemented measures to prevent repeated email retries due to timeout errors by ensuring failed attempts are properly logged.

• Updated the "Completed Training Path" widget name to "Completed Learning Path" in Learning Path Summary for better clarity.

• Updated New Hires group to track users for 90 days instead of 30.

• Updated Industry Phishing Risk Score widget by renaming "Phishing Simulation Metrics" to "Total Risky Actions" and "Total User Actions" to "Total Actions" for improved clarity.

• Updated Campaign Manager to include empty User-Agent data in A1 bot activity rules for more comprehensive detection, applied retroactively.

Bug Fixes:

• Fixed data inconsistency in Advanced Report's Funnel Diagram.

• Fixed issue where VirusTotal integration in Incident Responder returned Error or Forbidden despite valid API keys.

• Fixed issue where deleted Learning Path trainings caused errors in Enrollment reports, ensuring data remains accessible even after deletion.

• Fixed issue where Scenario Distribution data was missing in AI-powered campaign deliveries.

• Fixed issue where the "See Details" button in Zen Spamhaus redirected to a 404 page by updating the URL to the correct results page.

• Fixed issue in Incident Responder where bulk edit actions applied to all reported emails instead of the filtered subject count when using Cluster by filtering.

• Fixed issue causing an error when downloading the XML add-in.

• Fixed issue in Phishing Simulator AI Ally where images were not generated in email templates and landing pages.

29 January

New Features:

• Added "Insurance" as a new industry option.

• Implemented logic to send MFA codes from a UK number for +44 phone numbers and from the default number for all other regions.

• Added support for Albanian language across all products, with Preferred Language automatically set to Albanian in countries where it is commonly spoken.

• Integrated Microsoft's "Report Phishing" button with Keepnet Incident Responder for automated analysis and detailed reporting.

• Added Phishing Simulation Repeat Offenders Rate widget to the dashboard.

• Added Smart Grouping for Non-Simulated Users to identify users who have not participated in simulations.

• Added Smart Grouping for Untraining Users to identify and target users who have not completed any training.

• Added a new "Reseller" column in the Companies table to display the parent company of each listed company, with filtering and sorting enabled.

• Added QR code detection to Incident Responder, enabling identification and analysis of QR codes embedded in HTML body and image attachments of reported emails.

Improvements:

• Improved the Phishing Simulation Repeat Offenders Rate Widget by displaying the Current Level as a percentage in parentheses for clearer data representation.

• Improved the Phishing Report Rates Over Time Widget by rounding up percentage values, ensuring better readability and a more accurate representation of data.

• Updated Executive Reports to calculate Dwell Time as Median instead of Average in Phishing Dwell Time and Phishing Dwell Time and Quickest Response Time widgets. Legends updated to reflect "Median Dwell Time."

• Updated the filter order in Awareness Educator Training Library for improved usability.

• Updated "Target Audience" to "Roles" across Awareness Educator, including filters, dropdowns, table columns, and downloaded reports.

• Removed the "Make Unlimited" option from the License User Count field when creating a new company.

• Improved the Create New Email feature in Phishing Simulator scenarios to ensure the method in the new email template creation page matches the scenario's selected method.

Bug Fixes:

• Fixed issue in Gamification Report Timeline where scheduled campaign activities appeared before the sending date.

• Fixed issue in Phishing Simulator where merge tags were not rendered in email templates for scenarios with Attachment type.

• Fixed issue in Incident Responder where redirected URLs were shown as Undetected instead of displaying the redirect path.

• Fixed issue in Awareness Educator Learning Path Users where pagination did not update after applying filters, causing inconsistencies between listed users and widget data.

• Fixed issue where the info tooltip for "Stop bots to prevent false clicks" did not appear in Landing Page edit during Scenario edit and duplicate.

• Fixed issue in Callback Campaign Manager where active user count was determined based on phone numbers instead of email addresses.

14 January

New Features:

• Added support for Slovak, Slovenian, and Croatian languages, with Preferred Language automatically set based on the selected country.

• Added a new widget, "Phishing Simulation Repeat Offenders Rate" to help analyze and visualize repeat offender percentages effectively.

• Added functionality to capture and analyze redirect URLs in Incident Responder.

Improvements:

• Adjusted spacing in Executive Reports widgets to prevent overlapping in legends and Y-axis percentage labels.

• Updated status in Awareness Educator Users tab for posters and infographics from Completed to Downloaded to ensure consistency.

• Updated Anyrun status handling to mark queued or quota-exceeded URLs as Undetected instead of Error.

• Improved Learning Path Summary Users tab by refining status updates, removing irrelevant filter options, hiding the Current Step column by default, and updating old records to mark incomplete users as In Progress.

Bug Fixes:

• Fixed issue in Gamification Reports where attempting to view user details resulted in a 500 error.

• Fixed UI issue in Google User Provisioning where buttons and footer overlapped groups when the number of groups increased.

• Fixed issue with company logos not displaying correctly in notification templates by removing SVG support and converting existing SVG logos to supported formats like PNG.