Build 1210: Power-up defaults, manager changes and more accurate AttackPhish

11th November 2026 | Autopilot Release Notes Build 1210: Power-up defaults, manager changes and more accurate AttackPhish

Build 1210 adds Power-up defaults for new tenants, lets admins change the manager of synced users, and tightens how Dark Web data and AttackPhish clicks are handled.

New

  • Set Power-up defaults for new tenants and apply them to existing ones. New tenants start with the Power-ups you choose, and Apply to tenants brings the rest in line. Power-ups
  • Admins can change the manager of users synced from Entra ID or Google Workspace. Manager changes no longer have to wait for the next directory update. Integrations
  • A saved partner card can switch a subscription made in the Dashboard to automatic charging. You no longer need to set the subscription up again to stop paying by hand.

Improved

  • My Assignments has a program page with the CMMC Arcade card layout. Users see a program’s trainings laid out as cards in one place.
  • Users’ job title and department now come from directory sync, and their training role appears in the SCORM learner profile. Integrations
  • Dark Web report links no longer contain the recipient’s email address. They use a random token that expires after 30 days, so a shared link does not reveal who it was sent to. Dark Web
  • Breached passwords from DeHashed are stored only in masked form. The full password is never kept. Dark Web
  • The public Dark Web report footer no longer mentions dnstwister. Dark Web
  • Oversized summary reports are sent as a share link only. Large reports no longer risk being rejected as attachments. Reports

Fixed

  • Each HootPhish Challenge player is ranked once, and replays serve new emails. Players no longer show up twice, and playing again gives fresh questions. HootPhish
  • Library video previews show your own site’s branding instead of the Admin Library’s.
  • Entra ID no longer shows false reconnect alerts, and the government-cloud token refresh and the all-users sync are more reliable. Integrations
  • A mail-security scanner opening a phishing email’s page no longer counts as the user’s click. AttackPhish results reflect what people actually did. AttackPhish
  • Addresses you remove from the email suppression list stay removed. They no longer come back on their own.
Latest Blogs

Stay sharp with the latest security insights

Discover and share the latest cybersecurity trends, tips and best practices – alongside new threats to watch out for.

Malicious Browser Extensions: How to Keep Your Browser Clean

Malicious Browser Extensions: How to Keep Your Browser Clean

Author: Katie Boquetti | Editorial: Craig Taylor Editorial by Craig Taylor: “Power tends to corrupt,...

Read more
Your Calendar Has an Uninvited Guest

Your Calendar Has an Uninvited Guest

Author: Katie Boquetti | Editorial: Craig Taylor Editorial by Craig Taylor: For years we've trained...

Read more
The Patented Phishing Test that Introduces Itself

The Patented Phishing Test that Introduces Itself

Most phishing tests lie to your employees. This one says hello first! HootPhish tells people up front: this is...

Read more