> For the complete documentation index, see [llms.txt](https://docs.material.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.material.security/whats-new/previous-releases/version-1.46.md).
# Version 1.46
This release introduces significant enhancements to our threat remediation capabilities, specifically targeting calendar-based phishing, along with deeper visibility into AI-driven detections and more granular search control across the platform.
## ✨ Enhancements
### 🛡️ Phishing Detection & Remediation
#### **Calendar remediation for ICS phishing**
To combat the rise in ICS[^1] phishing, Material now automatically deletes associated calendar events when an email threat is remediated.
* **Automatic Cleanup**: When you remediate a message, Material finds and removes the corresponding calendar invite.
* **Mark as Safe**: If a message is later marked as safe, Material restores the meeting to the user’s calendar. This avoids productivity loss.
A new option in auto-remediation called **Delete associated calendar events** is now enabled by default. [Learn more here](/learn-more/risk-areas/email-threats/auto-respond.md#update-response-defaults).
#### Clearer AI Insights
We revamped the Email Threats Issue View to make our AI’s analysis easier to understand at a glance. Instead of a single overall description, you’ll now see the specific red flags that triggered the issue.
* **Transparent Analysis**: View the exact features and attributes (e.g., sender anomalies, language, or suspicious links) that the AI flagged.
* **Faster Triage**: Get immediate context on why a message was deemed malicious, so you can take action with confidence.
{% hint style="info" %}
**Note**: This feature is not available for customers who have opted out of Material’s GenAI capabilities.
{% endhint %}
### 🔍 Advanced Filters & Visibility
* **Recipient Search (List view)**: You no longer need to click into individual issues to see who was targeted. You can now filter for specific recipients directly from the Email Threats list view. This makes it easier to see which threats a specific user was involved in.
* **VIP Search Filters**: Prioritize your most sensitive accounts. [Message Search](/getting-started/fundamentals/explore/message-search.md) now supports filtering by VIP status. This lets you instantly pull up messages where a recipient is a designated VIP in Material.
### 📁 Data & Drive Security
#### Anomalous Drive Activity Detections
We added five new detections to help you spot potential data exfiltration or ransomware-style behavior within your Drive environment. Material will now alert you when an account:
* **Accesses a large number of files**
* **Deletes a large number of files**
* **Downloads a large number of files**
* **Edits a large number of files**
* **Moves or renames a large number of files**
***
### :bricks: Web Application Firewall
Material is committed to adhering to industry best practices to safeguard our customers. We continually re-evaluate our security posture and implement new controls to ensure that your data is protected and available for you to access whenever you need it. The next improvement to our infrastructure is a Web Application Firewall (WAF), which provides two key capabilities:
* **Block malicious traffic** before it reaches the Material API, using the battle-tested [Open Web Application Security Project (OWASP) Common Rule Set (CRS)](https://owasp.org/www-project-modsecurity-core-rule-set/).
* **Rate-limit excessive traffic** to prevent it from overwhelming the Material API, which could result in a denial-of-service (DoS).
We began work on this effort in October 2025, and we are rolling it out to production for all customers with this release.
## 🐛 Fixes and Improvements
* **Better Matching**: We tuned our similarity matching algorithm to be more precise, reducing the number of false-positive matches in a User Reported Email Threats issue.
* **Unified Experience**: We aligned the interfaces of Message Search and File Search to make navigating between the two feel seamless and intuitive.
[^1]: **ICS files** are the standard calendar file format used by Google Calendar, Outlook, etc.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.material.security/whats-new/previous-releases/version-1.46.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.