Tag: email security
48 articles
Hackers Exploit Apple Alerts to Fuel Phishing Scams
Scammers are exploiting Apple's own notification system to send fake emails that look legit, tricking you into divulging sensitive info with phishing scams disguised as iPhone purchase alerts. Be cautious when receiving Apple account change notifications - even if they come from Apple's servers!
CISA Adds Two Roundcube Flaws to KEV: Exclusive Critical
CISA has added two Roundcube vulnerabilities to its KEV list — including a critical 9.9-rated RCE (CVE-2025-49113) — meaning active exploitation is underway. If you run Roundcube, patch now to protect email stores, contacts, and stop attackers from hijacking accounts.
NCSC Set to Retire Web & Mail Check: Exclusive Urgent Alert
NCSC is retiring Web Check and Mail Check — if your organisation relies on them, now’s the time to act. Migrate your scans, prioritise critical assets, and find affordable alternatives before those safety nets disappear.
Blitz Spear Phishing Campaign Exclusive: NGOs at Risk
Imagine the inbox that coordinates relief suddenly opening the door to attackers: a one-day spear-phishing blitz—dubbed PhantomCaptcha—targeted NGOs and regional offices helping Ukraine with convincing impersonations and weaponized attachments to harvest credentials and deploy malware. It’s a stark reminder that adversaries now weaponize trust and identity to disrupt aid, not just networks.
political fundraising emails: Best Must-Have Fixes
GOP leaders are accusing Gmail of censoring Republican fundraising emails, prompting an FTC probe — but experts say the real story may be less about bias and more about how spam filters punish high-volume, poorly authenticated senders. Understanding sender reputation and better email practices could fix delivery problems without turning every misfiled message into a censorship scandal.
Libraesva ESG Urgent Patch: Critical Risk Exposed
A newly patched command-injection flaw in Libraesva’s Email Security Gateway was reportedly exploited by state-sponsored actors, putting email perimeters at risk of lateral movement and data theft. If you run ESG, update immediately, segment management interfaces, and hunt for signs of compromise.
Tycoon phishing kit: Stunning Dangerous Cloaking Tactics
A prolific phishing kit called Tycoon is now hiding malicious links behind layered redirects, URL obfuscation, and browser-only cloaking to slip past email scanners and trick users. Stay vigilant—combine stronger link inspection, browser-based emulation, DMARC/DKIM/SPF hardening, and user training to blunt this evolving threat.
Microsoft malware threat: Stunning, Alarming Risks
Imagine your inbox becoming a spying ground — UK officials warn Fancy Bear-linked hackers are using new malware to hijack Microsoft email accounts and siphon private messages and sensitive documents. Take it seriously: enable MFA, tighten access controls, and monitor for unusual logins to stay one step ahead.
Microsoft malware: Stunning Critical Threats Exposed
Russian state-backed hackers have unleashed stealthy Microsoft-targeted malware to hijack Outlook accounts—exposing how fragile our email defenses can be. Now’s the time to tighten security with phishing-resistant MFA, vigilant monitoring, and smarter user habits to stay one step ahead.
Russian email malware: Exclusive Dangerous Threat
A sophisticated Russian-linked malware campaign called Authentic Antics is quietly hijacking Microsoft cloud email accounts to harvest credentials and spy on high-value targets. Treat email security as strategic—enable MFA, monitor mailbox rules, and train users to spot convincing phishing so a single message can’t turn into a national-security headache.
Cybercriminals Exploit PDFs to Mimic Microsoft and DocuSign in Phishing Schemes
Cybercriminals are using manipulated PDFs to impersonate Microsoft and DocuSign, leading to sophisticated phishing schemes that target unsuspecting users.
Microsoft Defender for Office 365 Enhances Protection Against Email Bombing Attacks
Discover how Microsoft Defender for Office 365 strengthens security against email bombing attacks, safeguarding your organization’s communications effectively.
Microsoft 365 ‘Direct Send’ Exploited for Internal Phishing Attacks
Learn how Microsoft’s 365 ‘Direct Send’ feature is exploited in internal phishing attacks, compromising security and user trust within organizations.
Forging a Path in Cyberwarfare Defense Careers
Explore career opportunities in cyberwarfare defense, focusing on skills, challenges, and the vital role in protecting digital infrastructures.
Bitdefender Acquires Mesh to Enhance Email Security and Expand MDR Capabilities
Bitdefender acquires Mesh to bolster email security and expand Managed Detection and Response (MDR) capabilities, enhancing cyber threat protection.
Microsoft Outlook Strengthens Defenses by Blocking Risk
Microsoft Outlook enhances email security by proactively blocking risks and mitigating threats, ensuring reliable and robust communication.
Malicious Browser Extensions Target Over 700 Latin American Users Since Early 2025
Since early 2025, malicious browser extensions compromised privacy by targeting 700+ Latin American users, triggering urgent security alerts.
Email Security Alert: 90%+ of Major Domains Exposed to Spoofing Risks
Alert: Over 90% of major domains face email spoofing risks. Discover key solutions to boost protection and secure your communications.
Horabot Malware Exploits Invoice Phishing Tactics in
Horabot malware exploits invoice phishing tactics to breach defenses, deceiving users with fraudulent invoices and exploiting key vulnerabilities.
New KnowBe4 CEO Bryan Palma Combats Human Risk Via AI Agents
KnowBe4 CEO Bryan Palma leverages AI agents to counter human risk, pioneering innovative cybersecurity solutions for the modern digital landscape.
CoGUI Phishing Platform Dispatches 580 Million Emails to Harvest User Credentials
CoGUI Phishing Platform dispatched 580M emails to harvest user credentials, exposing a large-scale cyber attack exploiting user vulnerabilities.
How to survive as a CISO aka ‘chief scapegoat officer’
Survive as a CISO with practical risk management, stress reduction, and savvy strategies to thrive as the chief scapegoat officer.
Phishing Detection Failures: Understanding Why Many Attacks Resemble Zero-Day Exploits
Explore the reasons behind phishing detection failures and how many attacks mimic zero-day exploits, complicating cybersecurity defenses.
Phishing Attacks Utilize Google Sites and DKIM Replay to Disguise Emails and Harvest Credentials
Learn how phishing attacks exploit Google Sites and DKIM replay techniques to disguise emails and steal user credentials effectively.