Version 1.24

Material Security Release Notes – v1.24

🏀 March Madness is here, but the only upsets we care about are phishing attempts getting shut down early. This update boosts phishing detection, blocksndetects email bombing attacks, and squashes some bugs.

🆕 New Detections

• Email Bombing Attacks – We now flag mass email floods designed to bury important messages.

• Lookalike Domains – Catching sneaky variations like “yourcompany-secure.com” before they score.

• Fake Google Redirects – No free throws for phishers pretending to be Google.

• Suspicious Security Alerts – Spotting fake account warnings from imposters.

• New/Non-Existent Domains – Shutting down messages from sketchy fresh-registered domains.

• Hidden AMP Links – Detecting obfuscated tracking links in emails.

• Fake Document Reviews – Stopping shady “review this doc” emails leading to phishing sites.

• Tiny PDFs, Big Phishing Links – Blocking emails with tiny attachments hiding massive threats.

⬆️ Improved Detections

• Dropbox & DocuSign Requests – Now checking if senders are actually familiar.

• .eml Attachment Tricks – Better at catching disguised phishing attempts.

• VIP Impersonation – Smarter at spotting username-only executive spoofs.

• Outlook Relay Abuse – Detecting misuse of Sender Rewrite Scheme (SRS).

🧹 Bug Fixes & Improvements

• Non-UTF-8 Emails – Properly displayed on the message details page.

• UI Tweaks – Cleaned up minor issues and polished the experience.