The Latest Updates
Florence Bank, a Massachusetts community bank founded in 1873, has moved its domain to an enforced DMARC policy after a four-month engagement with EasyDMARC. The vendor published a…
Florence Bank, a Massachusetts community bank founded in 1873, has moved its domain to an enforced DMARC policy after a four-month engagement with EasyDMARC. The vendor published a…
Florence Bank, a Massachusetts community bank founded in 1873, has moved its domain to an enforced DMARC policy after a four-month engagement with EasyDMARC. The
Gmail’s Deliverability analysis now issues a warning when spam rates exceed 0.1%. The soft target has become an active diagnosis. Here is what the two
The Council of Anti-Phishing Japan links a June phishing surge to compromised ISP mailboxes and urges DMARC reject, BIMI, and passkeys, against the backdrop of
Apple told 404 Media it patched the Hide My Email flaw on 3 July. AppleInsider reproduced the behaviour on 17 July, leaving the fix contested
Pakistan’s PTA has triggered arrests over the illegal sale of telecom subscriber data, including call records, IMEI data, biometrics and location information.
India’s securities regulator, the Securities and Exchange Board of India (SEBI), issued a formal caution to regulated entities and listed companies on 17 July 2026
The latest phase of Operation Endgame has dismantled the infrastructure behind the Amadey loader and the StealC infostealer. Investigators took down 326 servers and 142
In the week the New York Knicks won their first title in fifty-three years, the cybercrime group ShinyHunters breached their parent company, Madison Square Garden
Microsoft has documented an active campaign against hotels that relays phishing through Calendly and Google so the mail authenticates cleanly. The lesson for the email
Varonis turned Microsoft 365 Copilot into a one-click mailbox thief. The link was a real microsoft.com address, so your anti-phishing stack would have waved it
The headline from EasyDMARC’s 2026 DMARC Adoption Report sounds like progress, and it is: 937,931 of the world’s top 1.8 million domains now publish a
Microsoft says email-based phishing threats remained massive during the first quarter of 2026, with QR-code phishing and CAPTCHA-gated attacks emerging as some of the fastest-growing
In February we wrote about a real Microsoft email being used for a scam, a genuine message, from genuine Microsoft infrastructure, doing a fraudster’s work
Kaspersky researchers have documented a sharp rise in phishing campaigns sent through Amazon Simple Email Service, not by exploiting any flaw in SES, but by
The FBI has issued a public service announcement (PSA 260521, 21 May) warning about Kali365, a phishing-as-a-service platform first spotted in April and sold mainly
For the past couple of years, deliverability teams have been trading the same complaint: emails that pass SPF, DKIM and DMARC cleanly, sent from domains
35,000 users. 13,000 organisations. 26 countries. All hit in 48 hours. Microsoft Defender Research has uncovered a phishing campaign that targeted more than 35,000 users
M3AAWG, the Messaging, Malware and Mobile Anti-Abuse Working Group, published an April 2026 update to its “TLS for Mail” baseline recommendations on its website, urging
A recent phishing message targeting an emailexpert mailing list highlights a persistent problem in email security: authentication signals are frequently misunderstood. At first glance, the
Days after researchers exposed abuse of Atlassian Jira Cloud to distribute investment scams from authenticated @atlassian.net addresses, a parallel campaign has emerged leveraging Xero’s email
Microsoft Exchange Online is reportedly misclassifying legitimate emails as phishing, sending them to quarantine and disrupting normal email delivery for some Microsoft 365 customers. Multiple
Nearly two years after AT&T disclosed a major data breach, the incident has returned in far more dangerous form. An “enriched” version of the original
According to the Cofense Annual Report 2026, attackers are now launching one malicious phishing email every 19 seconds. That’s more than twice as fast as
KnowBe4 recently released its Q4 2025 Phishing Simulation Roundup, detailing the most-clicked phishing email subjects from simulated phishing tests conducted between October and December 2025.
Google is expanding Gemini-powered capabilities inside Gmail, repositioning the inbox as a personal, proactive assistant rather than a static message list. In a Google Keyword
TL;DR: The “Relay Spam” Crisis The Deep Dive As of January 23, 2026, a global email-abuse campaign is still leaning on a very ordinary failure
VIPRE’s latest email threat report [Q3 2025 Email Threat Landscape Report ] paints a picture of attackers who understand that the best place to hide
A new study, “VBSF: A Visual-Based Spam Filtering Technique for Obfuscated Emails”, offers a fresh solution. Conducted by Ali Hossary and Stefano Tomasin at the
Abnormal AI’s latest report titled 2025 State of Misdirected Email Prevention: Keeping Sensitive Data Out of the Wrong Inboxes, flips a familiar narrative: some of
For years, the email security community has preached a simple gospel: Enable Multi-Factor Authentication (MFA), and you’ve won 99% of the battle. However, a sophisticated
Cybercriminals exploit Mimecast’s trusted links to bypass security filters—learn how to safeguard your email ecosystem.
Infoblox research reveals parked and typo domains now fuel phishing, malware, and BEC attacks, increasing cyber risks.
At this year’s EM Days in France, the Certified Senders Alliance (CSA) announced that Orange, one of the largest French mailbox providers, has joined as
