We’ve closed a $20M Series A investment led by Index Ventures. A reflection on how it all started, where we are today, and where we're headed.

A collection of static files maintained by the Sublime team, primarily used for phishing defense. - sublime-security/static-files

Sublime is the world’s first open email security platform that lets anyone write, run, and share rules in a universal domain-specific language (DSL) to block email-borne attacks, hunt for threats,...

This rule detects messages containing links exploiting CVE-2024-21413, which can lead to RCE. Successful exploitation can bypass built-in Outlook pro...

Learn how Sublime uses Siamese Neural Networks, Object Detection, and other signals within MQL to identify credential phishing attacks.

In the world of phishing defense, email reputation is an incredibly valuable, but often overlooked, piece of intelligence. While building Sublime [https://sublimesecurity.com], a detection and...

Join us for our next hands-on email detection engineering workshop in a labs environment utilizing Sublime platform and YARA with reproduced malware in delivr.to's payload collection.

This rule detects URLs matching a known Pikabot pattern where the linked domain has been reported to URLhaus, or the link downloads an archive contain...

There have been a lot of posts about crafting red team phishing campaigns, and most are incomplete. Today, we're going to walk through one of our recent external engagements from start to initial...

This post will cover a brief background of PikaBot, and focus primarily on recently observed attack techniques and email detection methods.

Learn how callback phishing poses unique detection challenges and how Computer Vision techniques like Optical Character Recognition and Logo Detection can help guard against these advanced social...

This post will cover a brief timeline of QakBot’s evolution, and focus primarily on recently observed attack techniques. We’ll discuss detection methodologies and share MQL rules that anyone can use...

Sneaky attackers are flipping backslashes in phishing email URLs to evade protections, researchers said.

This rule inspects messages originating from legitimate DocuSign infrastructure, with a DocuSign logo that match Callback Phishing criteria, in the bo...

The FBI and the Justice Department announced a multinational operation to disrupt and dismantle the malware and botnet known as Qakbot.

Use threat intelligence from Recorded Future to create detection rules in Sublime Security Get threat intelligence information from Recorded Future and create detection rules within Sublime Security...

Email remains the #1 initial access vector for commodity malware and nation state actors. Historically, tackling email-based threats has been considered the purview of black-box vendor solutions,...

Learn about the challenges of detecting Business Email Compromise (BEC) attacks and what makes them difficult for traditional security measures to identify. We'll explore how Natural Language...

As an IT Director one of the questions I get asked the most is: how do you cut down the amount of spoofed email and spam landing in your employee inboxes?

Detects inbound emails where the sender domain is less than 10 days old from untrusted senders.

Detects messages using Microsoft image based lures, referencing or including a QR code from an Unsolicited sender. These messages often lead users to ...

Deploy and integrate a free Sublime instance in minutes!

This post will cover a brief timeline of QakBot’s evolution, and focus primarily on recently observed attack techniques. We’ll discuss detection methodologies and share MQL rules that anyone can use...

This rule detects Credential Phishing attacks exploiting familiar brands via Dropbox comments. These attacks originate from legitimate Dropbox infrast...

Detects a known Qakbot delivery method, zip file with pdf, txt and wsf file at a depth of 1

MQL is highly extensible and can integrate virtually any tool or service to build better detection rules.📘Request a function!Don't see a function you want? Let us know via email or Slack!beta.mess...

Overview Git-backed rule feeds let you receive rule updates and new Sublime rules directly in your dashboard from both the Sublime team and the entire Sublime community.To view and manage rule feeds,...

With LimaCharlie, we believe that security capabilities should enable and empower the teams that use them. Email security is here to stay as a necessary component to the modern security stack....