Builds 1200 & 1201: SCORM in the CustomHoots library, a smarter Today page and a tidier side nav

13th October 2026 | Autopilot Release Notes Builds 1200 & 1201: SCORM in the CustomHoots library, a smarter Today page and a tidier side nav

Two builds in one: SCORM courses you can copy straight into your tenants, a Today page that leads with what matters most, and a cleaner side nav with plenty of fixes along the way.

New

  • SCORM courses in the CustomHoots Training Library. A new SCORM tab lists the CyberHoot SCORM trainings, and you can copy them into your tenants. CustomHoots
  • The Today page puts the most urgent alerts first, with broken integration syncs ahead of dark web exposures. Autopilot
  • The chatbot is available to tenant admins, not only site admins. Autopilot
  • Text-message assignment notifications link straight to the assignment. Assignments

Improved

  • A tidier side nav: AttackPhish is back for tenants and scoped to the tenant, Assessments sit under Power Ups, and Help lives in the top-nav ? menu.
  • Deployments: a clearer Search sites box and single-click site selection.
  • Delete Tenant explains itself with a tooltip when it’s disabled (MSP, primary or active tenant).
  • Row menus with a single action now show it as a button.
  • Custom Messaging: HR contact variables are labelled HR Contact and no longer appear in the Welcome email picker.
  • Directory sync: Entra ID shows a clear reconnect message when its credentials need renewing and handles large directories, and Google group sync skips external members it can’t read.
  • Tighter API security: tenant API keys can’t change protected customer fields or read other tenants’ AttackPhish logs.
  • Video link help now asks for SharePoint sharing links.

Fixed

  • Archived tenants open from the Archived list instead of showing Page Not Found.
  • Archive User shows a clear message instead of an error when the user can’t be identified.
  • The dashboard no longer errors when a customer has no valid training start date.
  • The Assignments page no longer errors when a link’s customer is gone.
  • The Entra ID and Google sync settings pages load even when the managers lookup fails.
  • CustomHoots tenants can load phishing templates in the send-test popup.
  • Translated text such as the French completion popup no longer shows raw apostrophe codes.
  • FlockPoints are corrected when an AttackPhish failure is retracted.
  • PDF reports generate reliably again.
Latest Blogs

Stay sharp with the latest security insights

Discover and share the latest cybersecurity trends, tips and best practices – alongside new threats to watch out for.

Your Calendar Has an Uninvited Guest

Your Calendar Has an Uninvited Guest

Author: Katie Boquetti | Editorial: Craig Taylor Editorial by Craig Taylor: For years we've trained...

Read more
The Patented Phishing Test that Introduces Itself

The Patented Phishing Test that Introduces Itself

Most phishing tests lie to your employees. This one says hello first! HootPhish tells people up front: this is...

Read more
EMERGENCY ADVISORY: Critical PHP Flaws (“PHP2Shell”) Need Action Today

EMERGENCY ADVISORY: Critical PHP Flaws (“PHP2Shell”) Need Action Today

Severity: CRITICAL (CVSS 9.2) | Issued: October 22, 2026 On October 21, two critical flaws in PHP,...

Read more