Paubox customers: Paubox Zoom social mixer (March 2025)

In our March Zoom social mixer, we discussed inbound email security, Paubox's new ExecProtect+, how Paubox [Tags] can make life easier for IT directors, and the latest attack vectors.

What happened: 

The March social mixer was an unmoderated discussion amongst healthcare IT professionals and marketers. We covered various topics, including ExecProtect+, moving from Mimecast, the latest phishing techniques, quishing, AI-generated voice attacks, video in patient engagement, and more.

Related: 2025 healthcare email security report

Introducing Paubox [Tags]: Paubox [Tags] is an upcoming feature that was well-received in today's mixer. [Tags] will allow admins to automatically append tags to email subject lines if the email sender is confirmed to be safe. For example, [Tags] will allow a Paubox user to flag a vendor invoice as [safe to pay] and let the team know that emails without the tag might not be safe.

One Paubox customer switched vendors and will use [Tags] to inform staff that emails from the new vendor are legitimate.

Our takeaways:

• While many anti-Business Email Compromise solutions focus only on executive emails, Paubox customers use keywords and key phrases to protect their inboxes.
  • Multiple attendees shared how this drastically lowered phishing emails.
  • ExecProtect wildcards are an underutilized option.
• Some Paubox customers want IT to review all quarantined emails; others want the end-user to manage their own inboxes.
• A recurring theme is the importance of company culture in preventing phishing.
  • Train employees, but also encourage them to report suspicious emails and mistakes.
• "I'm finally ready to drop Mimecast."
• Vendor consolidation is a good reason to move to Paubox.
• AI is making phishing attacks highly personalized.
• Should IT require employees to justify their reporting of suspicious emails?
  • The attendees had varied opinions on this.
  • Some felt it was better to encourage staff to report suspicious emails without any extra steps.
  • Others felt that asking questions like "Did you check the email address? Are you expecting to hear from them? Is it coming from our domain?" helped staff be more aware.
• AI-generated voice attacks are becoming common, so attendees are adjusting what can be done over the phone.
  • Some no longer share account details over the phone.
  • The security side hasn't caught up to the bad actors yet.
• Application whitelisting and or ring-fencing software was floated as a security approach.

The bottom line: Customers count on Paubox to help keep their emails HIPAA compliant, and save time managing inbound email security challenges.

See also: Our playbook for Zoom social mixers

See also: HIPAA Compliant Email: The Definitive Guide