Feature Overview : Previously, granting a role access to the Files tab automatically granted that role access to Live File Search and Manage Drives as well, with no way to separate the three.

What's New? Admins can now limit access to Live File Search and Manage Drives independently of general Files tab access, via Roles.

Why It Matters? Gives admins finer-grained control over what each role can see and do on Files-related tabs.

Feature Overview: Spam-Phishing scanning previously covered only the email message body.

What's New? Scanning now also covers email attachments, and Drive/OneDrive files shared by an external user with internal users are scanned for Spam-Phishing as well. (SharePoint and Shared Drive files are unchanged and are not scanned for this risk.)

Why It Matters? Closes a gap where phishing content delivered as an attachment, or via an externally-shared file, went unscanned.

Feature Overview: Spam-Phishing is enabled by ManagedMethods with a deliberate configuration (specific OUs, Incoming-only), but any customer SUPER_ADMIN could change or remove those settings.

What's New? The Spam-Phishing risk definition's configuration is now editable only by ManagedMethods Support. Customer admins can still view the setup for visibility but can no longer change or delete it; a related fix ensures ManagedMethods' own automated settings updates continue to apply correctly under the new restriction.

Why It Matters? Prevents accidental configuration changes that could burn the instance's daily scan limit or flood the Risks tab with noise, since the underlying model isn't tuned for unrestricted scanning.

Bug Overview: Some instances could end up with two CAM_QUARANTINE folders in the customer's Drive, with quarantined files split unpredictably between them.

What's Fixed? The quarantine destination folder is now persisted and reused instead of being re-resolved by folder name on every quarantine, which was the source of the duplicates.

Why It Matters? Ensures quarantined files reliably land in one consistent, predictable location.

Policy: Redesigned policy management to make monitoring and remediation rules easier to set up and fine-tune

Policy: Added support for entering and validating IPv6 addresses in policies

Policy: Improved policy creation with better domain validation, cleaner display of long inherited subjects, and automatic source selection when only one option applies

Policy: Improved readability of long policy warning messages and set Risk as the primary condition for Classroom policies

Live Email Search: Improved the error messages shown when deleting emails so they are clearer

Live Email Search: Added the ability to select and download up to 100 emails at once as PDFs from Live Email Search

Live Email Search: Added a View Link icon to all Share via Email options so you can jump straight to the related item

Live Email Search: Improved the placement of confirmation prompts in Live Email Search

Live File Search: Added a tooltip for the owner field in Live File Search

Reporting: Added version information to the Gemini usage report

Exclusions: Extended email subject exclusions to cover their attachments so excluded messages are no longer flagged

Exclusions: Added the ability to exclude emails or files from risk scanning based on their content

Audit & Control: Improved accessibility across the Audit & Control screens, making tables, modals, and navigation easier to use with assistive technology

Audit & Control: Updated the Audit & Control page colors to better match the brand

Policy Violation: Updated the Policy Violations tab to clearly mark violations for deleted files or emails as Deleted instead of linking to empty pages

Policy Violation: Added the ability to filter policy violations by deleted users and entities, with that information now included in the CSV export

User Activity: Fixed user activity history so account, risk, mail, and app actions are recorded and displayed correctly

User Activity: Restored the missing Report button on the User Activity view

Apps: Fixed an app's risk status not updating correctly when sanctioning it from the policy workflow

Apps: Fixed an error that caused the Revoke action on connected apps to fail

Drive: Fixed a shared drive error that occurred when no internal organizer was assigned

Drive: Fixed a file count mismatch when moving from the summary page to the files page

Drive: Corrected a typo displayed in the files table

Drive: Fixed quarantine and restore so file shares are properly removed and restored and owner details stay up to date

Drive: Fixed search field values not clearing when switching to the Drive tab

Drive: Fixed link-shared files not being quarantined and improved the reliability of quarantining and restoring Drive files

Drive: Fixed file sharing details incorrectly listing the event organizer as someone the file is shared with

Drive: Improved the error message shown when a Drive action cannot be completed

Drive: Fixed overlapping columns in the files table so information displays correctly

Drive: Fixed certain file shares not appearing, which prevented them from being removed

Drive: Fixed a quarantine failure for OneDrive files when a user has no OneDrive set up

Drive: Fixed overlapping text on the Drive management screen

Drive: Fixed duplicate email addresses appearing when searching for recipients to share with

Drive: Fixed an error that prevented Google Slides and other files from being downloaded in the Drive Files view

Drive: Fixed the sort icon overlapping other elements in the Drive files list

Drive: Fixed a failure when copying the link URL for a Drive file

Drive: Fixed overlapping filter options on the Drive files tab

Drive: Fixed file status so files are correctly marked as removed after a delete action

Groups: Fixed group scheduling so users who no longer match the org unit filter are removed during scheduled updates

Risk Detection: Fixed risk patterns failing to save when creating a new risk with a longer name

Risk Detection: Fixed the 'remind me later' option when reviewing flagged risk items

Risk Detection: Fixed disabled risks incorrectly appearing as enabled in the risk scanning view

Risk Detection: Updated the risk type label to display consistently as "Spam-Phishing" across risk views and reports

Risk Detection: Fixed an issue where custom labels were not applied to newly arriving emails

Risk Detection: Resolved an issue that prevented some customers from receiving complete risk scan results

Risk Detection: Fixed an error that caused scans to fail when keyword lists contained certain special characters, so custom keyword scanning now works reliably

Risk Detection: Fixed false-positive risk detections caused by the default Outlook icon in excluded email content

Risk Detection: Fixed risk scanning so keywords enclosed in parentheses are now detected

Risk Detection: Fixed broken spacing and layout on the risk definitions screen

Users: Fixed an issue where Microsoft 365 users could fail to sync after a weekly restart even when other data synced normally

Login Analyzer: Fixed approved and unapproved login counts to stay consistent between the summary and the Login Analyzer

Login Analyzer: Fixed a mismatch in the login counts shown in the Login Analyzer so the numbers now display correctly

General: Corrected the header color on a pop-up dialog so it displays as intended

General: Fixed an unwanted page scroll that occurred when deleting a task in Task Manager

Live Email Search: Restored the ability to restore spam emails from Live Email Search

Live Email Search: Improved Live Email Search accuracy and clearly labeled the search scope option as "All Folders"

Live Email Search: Fixed an issue where multiple confirmation popups could open at once in Live Email Search

Live Email Search: Fixed problems with email handling during Live Email Search quarantine and restore actions

Live Email Search: Fixed quick filters on the email tab so they correctly narrow the messages shown

Live Email Search: Fixed column sorting on the email tab so messages now order correctly

Reporting: Fixed the global report form so it resets correctly between uses

Reporting: Corrected an inaccurate risk count shown in the instance summary report

Risks: Fixed the Confirm button on risk bulk actions so it enables and disables correctly

Risks: Improved email quarantine and restore handling for messages already in trash, and refreshed the Task Manager view

Risks: Fixed an issue where an entity's name was hidden on the Risk tab when multiple labels were applied

Devices: Fixed a display problem with the radio button selection mark when managing ChromeOS devices

Accounts: Fixed the alignment of the email notification checkbox when suspending or unsuspending a user account

Exclusions: Fixed exclusion editing so email or file content conditions can no longer be combined with other conditions

Policy Violation: Fixed an error that could prevent policy violation details from loading for accounts with many violations

Policy Violation: Fixed app access revocation so all of the app's users are fully removed and the violation shows the revoke action

SharePoint/Teams: Fixed how account and SharePoint details appear in message information