NPM Backdoor Breach Exposes Email Supply Chain Risks
A malicious npm package exposed sensitive emails, revealing growing risks in AI-driven supply chain security.
The Latest Updates
Security & Deliverability
Security & Deliverability
NPM Backdoor Breach Exposes Email Supply Chain Risks
A malicious npm package exposed sensitive emails, revealing growing risks in AI-driven supply chain security.
Security & Deliverability
A malicious npm package exposed sensitive emails, revealing growing risks in AI-driven supply chain security.
Andrew Bonar
27/09/2025
Security & Deliverability
SpamGPT exposes how AI-driven phishing-as-a-service is reshaping cybercrime and challenging email security defenses.
Emailexpert Editorial Team
26/09/2025
Security & Deliverability
An urgent advisory for WordPress site administrators on a critical security flaw. A not insignificant security vulnerability (CVE-2025-59003) has been confirmed in the WP Mailgun
Emailexpert Editorial Team
19/09/2025
Security & Deliverability
Cybersecurity teams spend countless hours decoding cryptic rule names and obscure threat indicators. A single misinterpreted alert can slow investigations or, worse, let a malicious
Emailexpert Editorial Team
19/09/2025
Security & Deliverability
New safeguards aim to curb abuse while keeping reports useful for diagnosis The Internet Engineering Task Force (IETF) has taken another step forward in shaping
Emailexpert Editorial Team
19/09/2025
Security & Deliverability
Anti-spam service gave organisations until this week to switch systems or risk having legitimate mail rejected Korea Telecom users have been given until Tuesday to
Emailexpert Editorial Team
17/09/2025
Security & Deliverability
Cybersecurity firm Varonis has warned of an ongoing and widespread phishing campaign that exploits a seemingly benign Microsoft 365 feature to send highly convincing, spoofed
Emailexpert Editorial Team
15/09/2025
Security & Deliverability
This past week a sophisticated phishing attack on a maintainer of several popular npm packages led to the brief compromise of at least 18 widely
Emailexpert Editorial Team
12/09/2025
Security & Deliverability
The recently updated IETF’s “Applicability Statement for Core Email Protocols” (draft-ietf-emailcore-as) is reshaping email infrastructure. Now in its 23rd revision, this Internet-Draft isn’t just another
Andrew Bonar
12/09/2025
Security & Deliverability
Cybersecurity professionals are facing a new challenge that’s quietly undermining traditional email defenses. Threat actors have discovered that Scalable Vector Graphics (SVG) files offer an
Emailexpert Editorial Team
12/09/2025
Security & Deliverability
In a significant escalation of cyber threats, attackers are now using Apple’s iCloud Calendar to bypass traditional email security and deliver highly effective phishing scams.
Emailexpert Editorial Team
12/09/2025
Mergers and Acquisitions
Varonis’s planned acquisition of SlashNext, valued at up to $150 million, marks a notable step in the continuing consolidation of the cybersecurity market. It reflects
Emailexpert Editorial Team
12/09/2025
Security & Deliverability
AegisAI, a stealth-stage cybersecurity startup founded by former Google security leaders, has secured a $13 million seed round. The raise was disclosed in September 2025
Emailexpert Editorial Team
12/09/2025
Security & Deliverability
Bouncer, a leader in email verification, has recently released its Email Risk Report 2025, sending a clear warning shot across the bow of the email
Emailexpert Editorial Team
03/09/2025
Security & Deliverability
EasyDMARC has issued a technical advisory highlighting a critical gap in Microsoft 365’s handling of DMARC, warning that organizations are not fully protected even when
Emailexpert Editorial Team
01/09/2025
Industry News
Every community has its own heroes and villains. For those in the trenches of email delivery, cybersecurity, and abuse prevention, the latter were often found
Andrew Bonar
29/08/2025
Security & Deliverability
Security Boulevard has published its August 2025 Fraudulent Email Domain Tracker, drawing on Fraudmarc data to identify more than 2,000 disposable, throwaway, and abuse-prone domains
Emailexpert Editorial Team
29/08/2025
Security & Deliverability
What’s Changing? Microsoft has officially announced via their Exchange Team Blog that default onmicrosoft.com domains (MOERA domains) will now be limited to 100 external recipients
Nely Bonar
25/08/2025
Security & Deliverability
A niche post as it will only directly impact HiNet customers and any system relaying outbound mail via msr.hinet.net that is not already using SMTP
Emailexpert Editorial Team
21/08/2025
Legal & Compliance
Malaysia is taking a decisive step toward stricter email marketing regulations. The country’s communications regulator, MCMC (Malaysian Communications and Multimedia Commission), has launched a public
Emailexpert Editorial Team
21/08/2025
Security & Deliverability
DMARC should now be standard practice. Gmail and Yahoo began enforcing bulk‑sender rules in 2024 that require SPF, DKIM and a DMARC policy for high‑volume
Nely Bonar
15/08/2025
Security & Deliverability
Rspamd 3.12.0 has landed, bringing notable AI-driven enhancements to the open-source spam filtering platform. The release improves the built-in GPT module, adding support for Ollama
Emailexpert Editorial Team
15/08/2025
Security & Deliverability
Last week, the global jewelry brand Pandora confirmed a data breach that should serve as a wake-up call for every email marketer. While the headlines
Andrew Bonar
11/08/2025
Security & Deliverability
A bug in the GiveWP WordPress donations plugin exposed donor names, email addresses and donor IDs in page source for sites running versions up to
Emailexpert Editorial Team
11/08/2025
Security & Deliverability
A coordinated vishing‑and‑OAuth campaign is ripping data from companies’ Salesforce instances. Google tracks the cluster as UNC6040 for the intrusions and UNC6240 for the extortion
Emailexpert Editorial Team
11/08/2025
Security & Deliverability
On 7 August 2025, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued Emergency Directive 25-02 mandating federal agencies – and strongly advising all organisations
Emailexpert Editorial Team
09/08/2025
Security & Deliverability
A recent report from EasyDMARC, published 10 July 2025, presents strong evidence that government-mandated DMARC enforcement drives meaningful improvements in email authentication. The 2025 DMARC
Emailexpert Editorial Team
28/07/2025
Security & Deliverability
Cloudflare has quietly raised the bar on email authentication for its users. As of early July, the company began enforcing a new requirement for its
Emailexpert Editorial Team
28/07/2025
Security & Deliverability
A newly updated version of the DMARCbis specification—a draft standard currently under review by the Internet Engineering Task Force (IETF)—proposes a significant change to how
Emailexpert Editorial Team
28/07/2025
Security & Deliverability
Ireland’s National Treasury Management Agency (NTMA) has reportedly suffered losses of up to €5 million following what the Irish Daily Mail described on July 12
Oto
14/07/2025
Security & Deliverability
Cybercriminals are like everyone else leveraging AI-powered tools themselves, not just to generate attacks, but to weaponise the recipient’s own inbox AI features! A newly
Emailexpert Editorial Team
14/07/2025
Security & Deliverability
As email threats grow more complex, fueled in part by AI-driven phishing and spoofing, Cloudflare is reinforcing its Zero Trust email security capabilities through integrations
Nely Bonar
13/06/2025
Security & Deliverability
Recent research by email security experts at Technische Universität Berlin reveals how millions of domains worldwide are undermining their email authentication through widespread SPF misconfigurations
Andrew Bonar
12/06/2025
