Dean Levitt
In our March Zoom social mixer, we discussed inbound email security, Paubox's new ExecProtect+, how Paubox [Tags] can make life easier for IT directors, and the latest attack vectors.
What happened:
The March social mixer was an unmoderated discussion amongst healthcare IT professionals and marketers. We covered various topics, including ExecProtect+, moving from Mimecast, the latest phishing techniques, quishing, AI-generated voice attacks, video in patient engagement, and more.
Related: 2025 healthcare email security report
Introducing Paubox [Tags]: Paubox [Tags] is an upcoming feature that was well-received in today's mixer. [Tags] will allow admins to automatically append tags to email subject lines if the email sender is confirmed to be safe. For example, [Tags] will allow a Paubox user to flag a vendor invoice as [safe to pay] and let the team know that emails without the tag might not be safe.
One Paubox customer switched vendors and will use [Tags] to inform staff that emails from the new vendor are legitimate.
Our takeaways:
- While many anti-Business Email Compromise solutions focus only on executive emails, Paubox customers use keywords and key phrases to protect their inboxes.
- Multiple attendees shared how this drastically lowered phishing emails.
- ExecProtect wildcards are an underutilized option.
- Some Paubox customers want IT to review all quarantined emails; others want the end-user to manage their own inboxes.
- A recurring theme is the importance of company culture in preventing phishing.
- Train employees, but also encourage them to report suspicious emails and mistakes.
- "I'm finally ready to drop Mimecast."
- Vendor consolidation is a good reason to move to Paubox.
- AI is making phishing attacks highly personalized.
- Should IT require employees to justify their reporting of suspicious emails?
- The attendees had varied opinions on this.
- Some felt it was better to encourage staff to report suspicious emails without any extra steps.
- Others felt that asking questions like "Did you check the email address? Are you expecting to hear from them? Is it coming from our domain?" helped staff be more aware.
- AI-generated voice attacks are becoming common, so attendees are adjusting what can be done over the phone.
- Some no longer share account details over the phone.
- The security side hasn't caught up to the bad actors yet.
- Application whitelisting and or ring-fencing software was floated as a security approach.
The bottom line: Customers count on Paubox to help keep their emails HIPAA compliant, and save time managing inbound email security challenges.
See also: Our playbook for Zoom social mixers
Subscribe to Paubox Weekly
Every Friday we'll bring you the most important news from Paubox. Our aim is to make you smarter, faster.