Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Version 1.26

Material Security v1.26

Shut down risky sessions. Triage phishing faster.

This release makes it easier than ever to stop compromised accounts in their tracks with new Microsoft 365 session revocation—both automatic and manual. It also delivers major upgrades to phishing issue views and list triage, with better context, cleaner workflows, and richer detections across email, files, and apps.

🔐 Microsoft 365 Session Revocation

Session revocation is now integrated across Material’s detections, letting you stop active threats in real time—automatically or on demand.

Auto-remediation now ends M365 sessions when detections trigger—covering threats like:

  • Accessing multiple sensitive files in quick succession

  • Sign-ins from known malicious IPs

  • Activity inconsistent with past behavior

  • Use of compromised SAML tokens

  • And more

Manual session revocation is now available:

  • Directly from the Issue details or Account page

  • Instantly accessible via CMD+K or with a single click

🎣 Phishing Issues: More Context, Less Clicks

Get to the root of phishing threats faster, with less digging and more immediate insight.

  • Issues are now generated from phishing cases—just like other detection types

  • Representative message previews shown by default

  • Quick links to search messages from the sender or recipient

  • Tooltips clarify what’s “detected” vs. “similar”

  • Response actions now follow the same workflow used across the platform

  • Phishing list view redesigned for scanability and efficient triage

  • In-issue remediation now feels consistent across all detection types

🧠 Detection Highlights

Smarter detection signals across phishing, files, and apps.

Email Detections

  • Spoofed payment/document messages using Microsoft subdomain links

  • Long/random sender usernames linked to known phishing campaigns

  • VIP name in subject, mismatched email + free provider

  • Known BEC campaign patterns

  • Sextortion/extortion from first-time senders

  • Attachments abusing open redirects

  • Phishing via Slab links

File Detections

  • Investor communications (PPMs, subscription agreements, LP notices) flagged via keyword match

App Detections

  • Social login OAuth grants now excluded from detection scope

✅ Streamlined File Remediation Configuration Experience

  • New global setting to enable/disable file remediation across file issues

v1.26 puts control in your hands and insight at your fingertips—revoking risk and revealing threats with greater clarity and speed.

PreviousUnified Phishing Issue Experience
NextVersion 1.25

Last updated

Was this helpful?