Cloud-based email security vendor Abnormal Security has launched new threat detection capabilities for Teams, Zoom and Slack.
Abnormal's three new email-centric products are designed to help users of the Teams, Zoom and Slack platforms detect suspicious messages, remedy compromised accounts, and provide data and management services for security posture. The new solutions are included as add-ons to the Abnormal Inbound Email Security offering and are generally available at launch.
Evan Reiser, Chief Executive Officer at Abnormal Security, commented:
Abnormal’s platform uses an anomaly detection engine that ingests and correlates 45,000 plus behavioral signals from email platforms (Microsoft 365, Google Workplace), EDR platforms (CrowdStrike), authentication platforms (Okta), and email-like applications such as Slack, Microsoft Teams, and Zoom. Signals include sign-in events, geo-location, compromised identities, and communication patterns in messaging."
The message security feature enables platform administrators to monitor and act against suspicious activities by scanning messages for suspicious domains and URLs. Administrators can then flag potential threats for further review. This solution includes messages sent from internal employees and external stakeholders.
The account takeover protection solution will assess Slack, Teams, and Zoom authentication activity and alert security teams to suspicious sign-in events. Examples include sign-ins from a blocked browser, a risky location, or an IP address with a bad reputation. Each event is automatically flagged for investigation. Single sign-on activity from Okta and Azure Active Directory is included for further evidence.
The security posture management feature provides an intuitive view of platform user privilege changes to certify that only the appropriate users have admin rights.
Vendors Becoming More Security-Conscious
Zoom, Teams, and Slack platforms being integrated with Abnormal's new suite of threat protection solutions is the latest example of vendors becoming even more security-conscious, especially with the rise of hybrid work and the security and compliance risks associated with accessing sensitive data outside on-premises networks.
Earlier this month, Cisco announced it will introduce air-gapping to Webex in 2024 to address national security concerns.
