Security Awareness Service – Release Notes and New Phishing Scenarios – October 6, 2026
ENHANCEMENTS
HTTPS support for phishing simulations
Phishing simulation landing pages now use HTTPS to support compatibility with modern browsers, ensure reliable access to the Most Teachable Moment page, improve reporting accuracy for phishing interactions, and align with current security standards.
Depending on their configuration, some customers may need to update their infrastructure to use the new domains:
- Customers using IP/DKIM whitelisting do not need to make any changes.
- Customers who generate a domain list in the Control Panel must regenerate the list and update their infrastructure from the release date. If the new domains are not added, simulation statistics may be inaccurate, emails may not be delivered, or autoclickers and other filters may intercept emails.
New Phishing Scenarios
Adds new phishing simulation scenarios starting on October 6, 2026. The new scenarios are available in all supported phishing simulation languages.
| Email Subject | Short description | Description |
|---|---|---|
| Invitation: New Sports & Wellness Benefits – Teams Meeting | Company benefits for sport and wellness | A phishing email impersonating the HR department, inviting employees to join a mandatory Microsoft Teams meeting announcing new company benefits related to sports and wellness activities |
| Action Required: Office Wi-Fi Password Change | Company-wide Wifi Password Change | User receives an email with a QR code regarding the Wifi password change |
| 👋 A colleague invited you to join them in Jira | Jira collaboration invitation from a colleague | User receives an email inviting them to collaborate with a colleague and their team in Jira |
| Vote for the Drinks You’d Like to See in Our Fridges | Office fridge drink selection poll | User receives a poll link to vote for the soft drinks they would like to see in the office fridges |
| Launch of the Updated Code of Conduct | Updated Code of Conduct attachment | User receives an updated copy of the company Code of Conduct from the CEO and is expected to review and acknowledge it. |
| 👋 A colleague invited you to collaborate with your team in Jira | Jira collaboration invitation from a department head | User receives an email from their department head inviting them to collaborate with a colleague and their team in Jira |
| Wellhub: a new benefit for all of us | New Wellhub company benefit | The user receives an internal HR announcement about a new Wellhub benefit and is invited to register through a spoofed link. |
| Your invitation to Wellhub | Wellhub invitation and free wellbeing account | Wellhub invites the recipient to create a free account after announcing access to gyms, studios, trainers, and wellness apps. |
| Please RSVP for the company’s Christmas celebration on December 18, 2026 | Christmas company event registration | Human Resources invites employees to RSVP for the company Christmas celebration on December 18, 2026 and provide any dietary requirements. |
| Christmas gift exchange at the company: add your preferences | Company Christmas gift exchange preferences | An internal employee reminds the recipient to submit their preferences for the company’s Christmas gift exchange. |
| The company Christmas giving campaign: select a cause | Company Christmas giving campaign | People & Culture is coordinating a Christmas giving campaign in which employees choose one of three local organizations for the company to support through a giving partner’s campaign page. |
| Please RSVP for the company team Christmas dinner | Manager requests RSVP for team Christmas dinner | A manager invites the recipient to RSVP for the company’s team Christmas dinner through a company event page. |
| Please confirm Christmas and New Year coverage for the department team | Department Christmas holiday coverage confirmation | A same-department employee coordinating the team’s Christmas and New Year coverage asks the recipient to confirm availability and backup coverage, mentioning that the department head requested the final rota. |
| Please review the department Secret Santa worksheet | Head of Department sends Secret Santa budget worksheet | The alleged Head of Department sends an Excel worksheet containing the preliminary department Secret Santa participant list and gift budget for employees to review. |
| Your Christmas gift card is waiting | Christmas gift card promotion | A promotional email claims that the recipient has been selected to receive a Christmas gift card and invites them to claim the offer before it expires. |
