Version 1.46
This release introduces significant enhancements to our threat remediation capabilities, specifically targeting calendar-based phishing, along with deeper visibility into AI-driven detections and more granular search control across the platform.
✨ Enhancements
🛡️ Phishing Detection & Remediation
Calendar remediation for ICS phishing
To combat the rise in ICS phishing, Material now automatically deletes associated calendar events when an email threat is remediated.
Automatic Cleanup: When you remediate a message, Material finds and removes the corresponding calendar invite.
Mark as Safe: If a message is later marked as safe, Material restores the meeting to the user’s calendar. This avoids productivity loss.
A new option in auto-remediation called Delete associated calendar events is now enabled by default. Learn more here.
Clearer AI Insights
We revamped the Email Threats Issue View to make our AI’s analysis easier to understand at a glance. Instead of a single overall description, you’ll now see the specific red flags that triggered the issue.
Transparent Analysis: View the exact features and attributes (e.g., sender anomalies, language, or suspicious links) that the AI flagged.
Faster Triage: Get immediate context on why a message was deemed malicious, so you can take action with confidence.
🔍 Advanced Filters & Visibility
Recipient Search (List view): You no longer need to click into individual issues to see who was targeted. You can now filter for specific recipients directly from the Email Threats list view. This makes it easier to see which threats a specific user was involved in.
VIP Search Filters: Prioritize your most sensitive accounts. Message Search now supports filtering by VIP status. This lets you instantly pull up messages where a recipient is a designated VIP in Material.
📁 Data & Drive Security
Anomalous Drive Activity Detections
We added five new detections to help you spot potential data exfiltration or ransomware-style behavior within your Drive environment. Material will now alert you when an account:
Accesses a large number of files
Deletes a large number of files
Downloads a large number of files
Edits a large number of files
Moves or renames a large number of files
🧱 Web Application Firewall
Material is committed to adhering to industry best practices to safeguard our customers. We continually re-evaluate our security posture and implement new controls to ensure that your data is protected and available for you to access whenever you need it. The next improvement to our infrastructure is a Web Application Firewall (WAF), which provides two key capabilities:
Block malicious traffic before it reaches the Material API, using the battle-tested Open Web Application Security Project (OWASP) Common Rule Set (CRS).
Rate-limit excessive traffic to prevent it from overwhelming the Material API, which could result in a denial-of-service (DoS).
We began work on this effort in October 2025, and we are rolling it out to production for all customers with this release.
🐛 Fixes and Improvements
Better Matching: We tuned our similarity matching algorithm to be more precise, reducing the number of false-positive matches in a User Reported Email Threats issue.
Unified Experience: We aligned the interfaces of Message Search and File Search to make navigating between the two feel seamless and intuitive.
Last updated
Was this helpful?