What’s New at ZeroFox | Q2 2025

ZeroFox is dedicated to providing comprehensive protection through discovery, alerting, and disruption across social media and the surface, deep and dark webs. This latest What’s New at ZeroFox provides an overview of new capabilities and explores platform enhancements that will noticeably improve the end user experience.

External Attack Surface Management New Capabilities

Role-Based Access Control (RBAC) & Seed Groups

The ZeroFox platform now has the ability to group seed sand assign them to role-based access groups within EASM. This improvement provides improved user visibility, allowing users to view and report on data relevant to their responsibilities, including top three hosts, most common vulnerabilities, and the timeline of assets and exposures. In addition, users can leverage RBAC functionality to designate asset groups for enumerated seed data, facilitating better grouping and management of attack surface discovery.

Improved Software/Version Mapping & Detection

ZeroFox EASM collector configurations have been optimized to enhance detection of Products and Versions, increasing visibility. EASM maps Products and Versions, reducing investigation time for exposures. By delivering detailed, actionable information, EASM significantly improves users' ability to effectively manage their organization's security posture and mitigate risk.

IP & CIDR Blocks Discovery

ZeroFox EASM now discovers IP addresses and CIDR blocks, which are a collection of IP addresses that share the same network prefix and number of bits. Many organizations rely solely on IP addresses to host critical services, including unassigned IPs that may later have active services deployed. Additionally, some organizations own expansive CIDR blocks that need close monitoring. This new capability will enhance user visibility by uncovering a significantly greater number of assets, services and exposures.

Improved Subdomain Discovery

ZeroFox EASM now features enhanced subdomain discovery capabilities, providing improved visibility while discovering more assets, services and exposures.

Intelligence Search Features 

Saved Searches

ZeroFox Intelligence Saved Searches allows security teams to craft, save and easily reuse customized search queries tailored to their specific needs. Analysts will no longer need to reassemble intricate queries; with one click, users can execute pre-set searches, allowing for faster insights and more efficient monitoring.

Intelligence Search User Experience

The Intelligence Search user experience has been greatly enhanced, providing formatted detail cards for indicators and threat actors that are easy to read and show associations (i.e. links or references) from the ZeroFox Intelligence Graph. This enhancement will aid in faster investigations due to the ability to easily locate intelligence that supports a security teams' needs.

Enhanced Support and Protection

Executive Protection Managed Services

New offerings for ZeroFox Executive Protection provide a new option for additional intelligence-driven support to address security gaps at scale, including Executive Threat Assessments, Person of Interest Assessments, Travel Assessments, and more. These managed services provide tailored, proactive support to protect organizations' executives and VIPs.

Instagram Creator Account Support

The ZeroFox platform now supports Instagram Creator accounts for Risky Name Change alerting, providing an additional method of authentication and monitoring for Instagram accounts.

Automated Meta Ad Monitoring

Meta Ad monitoring is now automated, providing faster and more comprehensive coverage of potentially fraudulent or malicious Facebook, Instagram, WhatsApp, Threads and Facebook Messenger advertisements targeting organizations or end users. Alerts are generated if fraudulent advertisements across the Meta Ad Library are found that match an organization's brand or executives, allowing for swift takedown action.

New Disruption Capabilities & Enhancements

YouTube Takedowns Up/Down Scanner

To improve efficiency, ZeroFox has introduced automated up/down scanning for YouTube takedowns. This process will verify content availability before takedown submission, ultimately resulting in an increased YouTube takedown acceptance rate and faster YouTube takedown resolution.

PII Removal Enhancements

ZeroFox PII Removal has been enhanced to deliver more accurate reporting and alerting on discovered PII. Internal PII tooling has been developed as the single source of truth, allowing for more consistent, validated and reliable reporting.

Duplicate Alert Filtering & Additional Context

Duplicate Telegram Alert Filtering 

Threat actors on Telegram post the same content across multiple channels in a short time interval (spam), resulting in multiple alerts for the same piece of content. ZeroFox has introduced configurable alert filtering, so users will not receive critical or escalated alerts for content deemed duplicative on Telegram, additionally allowing for whitelisting of specific Telegram channels. These enhancements ensure users are not receiving overwhelming alerts for the same pieces of content, while only receiving alerts for Telegram channels that truly matter to the user.

Physical Security Intelligence (PSI) Additional Alert Context

ZeroFox PSI alerts and map views now include additional context, in addition to organizing common elements into distinct fields. The fields include:

• Incident address: Clarifying the impacted location at a glance
• Attendee Count: Including context around how many people may be involved with or impacted by the incident.

This new format makes alerts easier to read, integrate and understand with additional context and distinct fields, allowing users to make informed decisions quickly.

Ask.ZeroFox.com Knowledge Base

ZeroFox’s knowledge base includes searchable articles to empower users to instantly find product information and learn more about ZeroFox services. To stay connected to product information and contact support, be sure to bookmark ask.zerofox.com.

Ready to Check Out What's New?

Explore these platform enhancements and new capabilities for yourself. Book a demo now.