Security Experts:

WRITE FOR US
Email Security

LATEST SECURITY NEWS HEADLINES

rss icon

Android, macOS Versions of GravityRAT Spyware Spotted in Ongoing Campaign
Scammers Seize on US Election, But It's Not Votes They Want
U.S. Charges Russian Intelligence Officers for NotPetya, Industroyer Attacks
CISA Warns of Remote Code Execution Bugs in Visual Studio, Windows Codecs Library
Google Says No Significant Election Influence Campaigns Targeting Its Users
long dotted

NEWS & INDUSTRY UPDATES

Twitter Says Hackers Targeted 130 Accounts in Recent Attack
Twitter says hackers targeted 130 accounts in the recent attack, but only managed to hijack some of them. [Read More]
COVID-19 Fuels Phishing and Scams While BEC Attacks Evolve and Increase
COVID-19 is fueling phishing and scams while BEC attacks continue to evolve and increase, according to a report from Abnormal Security. [Read More]
Google Sees Increase in COVID-19 Phishing in Brazil, India, UK
Cyber-threats taking advantage of the COVID-19 pandemic are evolving, and Google is seeing an increase in related phishing attempts in countries such as Brazil, India, and the UK. [Read More]
NSA Publishes IOCs Associated With Russian Targeting of Exim Servers
The NSA has published information on the targeting of Exim mail servers by the Russia-linked threat actor known as Sandworm Team. [Read More]
Top UN Official Warns Malicious Emails on Rise in Pandemic
The U.N. disarmament chief warned Friday that cyber crime is on the rise, with a 600% increase in malicious emails during the COVID-19 pandemic. [Read More]
Chrome 83 Brings Enhanced Safe Browsing, New Privacy and Security Controls
Google this week released Chrome 83 to the stable channel with patches for a total of 38 vulnerabilities, with improved Safe Browsing protection, and updated privacy and security controls. [Read More]
Over 6,400 Edison Mail Users Hit by Security Bug in iOS App
Edison Mail says a security bug in its iOS app that gave users access to other people’s email accounts impacted nearly 6,500 users. [Read More]
Sophisticated Phishing Kit Used by Multiple Groups to Target Executives
A sophisticated phishing kit has been used by multiple cybercrime groups to target high-ranking employees in North America and other parts of the world, with at least 150 victims. [Read More]
Apple Finds No Evidence of Attacks Targeting iOS Mail App Vulnerabilities
Apple says it has found no evidence that the recently disclosed iOS Mail app vulnerabilities have been exploited in attacks as researchers have claimed. [Read More]
Tax Phishing Campaign Reminds of DMARC Limitations
Phishers do not need to spoof the exact domain name if they can use a different domain that might be accepted as reasonable. [Read More]

FEATURES, INSIGHTS // Email Security

rss icon

Alastair Paterson's picture
Business Email Compromise Still Reigns
Alastair Paterson - Email Security
Organizations may not be able to mitigate BEC scams entirely; however, tightening up processes will ensure data exposure is kept to a minimum.
Read full story
Ashley Arbuckle's picture
How Three of 2018's Critical Threats Used Email to Execute Attacks
Ashley Arbuckle - Email Security
By learning from the past there are many steps we can take to strength our approach to security as attackers continue to turn to email to help accomplish their mission.
Read full story
Siggi Stefnisson's picture
Evasive Malware, Meet Evasive Phishing
Siggi Stefnisson - Email Security
“Evasive phishing" is not a term much heard, but we all will—and need to—start talking a lot more about it than we have in the past.
Read full story
Alastair Paterson's picture
Attackers Are Landing Email Inboxes Without the Need to Phish
Alastair Paterson - Email Security
BEC is becoming increasingly profitable for threat actors as organizations are making it easy for adversaries to gain access to the valuable information that sits within these inboxes.
Read full story
Siggi Stefnisson's picture
Phishing Training is a Tool, Not a Solution
Siggi Stefnisson - Email Security
We should be thinking about how users work, what they do and how it affects the security posture of the business, but does security really start with them?
Read full story
Siggi Stefnisson's picture
Cross-Vector Threats: The Web Begins Where Email Ends
Siggi Stefnisson - Endpoint Security
Ninety percent of breaches may begin with an email, but today most of the action happens well after an inbound email has been scanned and delivered.
Read full story
Josh Lefkowitz's picture
Preventing Business Email Compromise Requires a Human Touch
Josh Lefkowitz - Email Security
Even organizations with the most robust defense solutions and advanced automated technologies cannot effectively combat threats such as BEC without the adequate support and nuanced expertise of humans.
Read full story
Jack Danahy's picture
The 3 Biggest Malware Trends to Watch in 2018
Jack Danahy - Email Security
To mitigate the risk of attacks, IT teams should disable unused tools and components, while deploying endpoint protection that doesn’t rely solely on file scanning or whitelisting.
Read full story
Markus Jakobsson's picture
It Takes a Village: The Importance of Security Standards
Markus Jakobsson - Email Security
DMARC is an email authentication standard designed to eliminate phishing and other types of attack that use spoofing to misrepresent an email sender identity.
Read full story
Markus Jakobsson's picture
Endpoint Protection: Spotting the Cyber Wolf in Sheep's Clothing
Markus Jakobsson - Endpoint Security
Endpoint protection will never be able to catch up with “known wolves,” but machine learning and artificial perception can change the rules of engagement with models of “known good.”
Read full story