email security - Security Ticks

Trustwave SpiderLabs’ Insights, History, and Mitigations for Scattered Spider

data breach, Database Protection, email security, Emerging Threats, Security Research, Threat Intelligence / SecurityTicks

Trustwave SpiderLabs’ Insights, History, and Mitigations for Scattered Spider 2025-05-02 at 19:32 By The UK retail market has been thrown into turmoil in recent weeks, with three of that nation’s highest-profile retailers being targeted allegedly by the well-known threat group Scattered Spider in at least one of the most disruptive incidents. This article is an […]

React to this headline:

Trustwave SpiderLabs’ Insights, History, and Mitigations for Scattered Spider Read More »

Why Microsoft Email Security Benefits from a Layered Approach

email security, Microsoft Security, Perspectives, Vulnerabilities / SecurityTicks

Why Microsoft Email Security Benefits from a Layered Approach 2025-05-02 at 16:03 By Doug Olenick The best secure email gateways mimic the tried and true “defense in depth” cybersecurity strategy by using a layered approach, including advanced features that make effective use of AI. This article is an excerpt from Trustwave Blog View Original Source

React to this headline:

Why Microsoft Email Security Benefits from a Layered Approach Read More »

A Deep-Rooted Infestation: How the ILOVEYOU Bug Continues its Legacy in Modern Worms

email security, Perspectives, Vulnerabilities / SecurityTicks

A Deep-Rooted Infestation: How the ILOVEYOU Bug Continues its Legacy in Modern Worms 2025-05-02 at 16:03 By Pauline Bolaños A quarter century ago, a former computer science student from the Philippines accidentally unleashed one of the most destructive computer viruses in modern history. This article is an excerpt from SpiderLabs Blog View Original Source React

React to this headline:

A Deep-Rooted Infestation: How the ILOVEYOU Bug Continues its Legacy in Modern Worms Read More »

Low-tech phishing attacks are gaining ground

email security, News, phishing, report, survey, VIPRE Security / SecurityTicks

Low-tech phishing attacks are gaining ground 2025-05-01 at 07:02 By Help Net Security Cybercriminals are increasingly favoring low-tech, human-centric attacks to bypass email scanning technologies, according to VIPRE Security. The report is based on an analysis of global real-world data and highlights the most significant email security trends from the first quarter of 2025. Callback

React to this headline:

Low-tech phishing attacks are gaining ground Read More »

The Top Phishing Lures Targeting Manufacturers Revealed by Trustwave SpiderLabs

Database Protection, email security / SecurityTicks

The Top Phishing Lures Targeting Manufacturers Revealed by Trustwave SpiderLabs 2025-04-30 at 16:03 By As detailed in the 2025 Trustwave Risk Radar Report, cybercriminals are increasingly targeting the manufacturing sector with sophisticated phishing tactics, exploiting both human behavior and trusted platforms. Trustwave SpiderLabs researchers uncover the most prevalent phishing lures—file-sharing notifications, HR documents, fake payment

React to this headline:

The Top Phishing Lures Targeting Manufacturers Revealed by Trustwave SpiderLabs Read More »

CISA warns about actively exploited Broadcom, Commvault vulnerabilities

Broadcom, CISA, Commvault, data center, Don't miss, email security, Hot stuff, Japan, News, USA / SecurityTicks

CISA warns about actively exploited Broadcom, Commvault vulnerabilities 2025-04-29 at 15:47 By Zeljka Zorz The Cybersecurity and Infrastructure Security Agency (CISA) has added three new flaws to its Known Exploited Vulnerabilities catalog on Monday, affecting Commvault (CVE-2025-3928), Active! Mail (CVE-2025-42599), and Broadcom Brocade (CVE-2025-1976) solutions. CISA’s KEV catalog is constantly updated and provides IT admins

React to this headline:

CISA warns about actively exploited Broadcom, Commvault vulnerabilities Read More »

FBI 2024 IC3 Report: Phishing Soars, Ransomware Batters Critical Infrastructure as Cyber Losses Climb

data breach, DFIR, email security / SecurityTicks

FBI 2024 IC3 Report: Phishing Soars, Ransomware Batters Critical Infrastructure as Cyber Losses Climb 2025-04-25 at 16:02 By Phishing, ransomware, and data breaches remain top threats, driving a sharp rise from $12.5 billion in 2023. With over 193,000 reports and $70M in losses, phishing outpaced extortion and data breaches as the most common cybercrime in

React to this headline:

FBI 2024 IC3 Report: Phishing Soars, Ransomware Batters Critical Infrastructure as Cyber Losses Climb Read More »

Why Image Analysis is a Crucial Component of an Email Security Solution

Artificial Intelligence, email security, Tips & Tricks / SecurityTicks

Why Image Analysis is a Crucial Component of an Email Security Solution 2025-04-24 at 18:12 By While it’s well-known that email represents a significant source of cybersecurity threats, it’s not just the text included in emails that’s worrisome; images can be malicious as well. What’s more, images in emails may also present a threat of

React to this headline:

Why Image Analysis is a Crucial Component of an Email Security Solution Read More »

AI-Powered Polymorphic Phishing Is Changing the Threat Landscape

AI, artificial inteligence, Artificial Intelligence, email security, phishing / SecurityTicks

AI-Powered Polymorphic Phishing Is Changing the Threat Landscape 2025-04-24 at 14:32 By Stu Sjouwerman Combined with AI, polymorphic phishing emails have become highly sophisticated, creating more personalized and evasive messages that result in higher attack success rates. The post AI-Powered Polymorphic Phishing Is Changing the Threat Landscape appeared first on SecurityWeek. This article is an

React to this headline:

AI-Powered Polymorphic Phishing Is Changing the Threat Landscape Read More »

Legacy Google Service Abused in Phishing Attacks

email security, Google phishing, OAuth, phishing / SecurityTicks

Legacy Google Service Abused in Phishing Attacks 2025-04-22 at 14:15 By Ionut Arghire A sophisticated phishing campaign abuses weakness in Google Sites to spoof Google no-reply addresses and bypass protections. The post Legacy Google Service Abused in Phishing Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

Legacy Google Service Abused in Phishing Attacks Read More »

Rethinking the Human Factor in Cybersecurity

email security, Emerging Threats / SecurityTicks

Rethinking the Human Factor in Cybersecurity 2025-04-17 at 16:52 By Rethink human involvement in cybersecurity—it’s not about blame, but about designing systems that support human strengths and mitigate limitations. Explore how secure email gateways (SEGs) like Trustwave MailMarshal use AI-powered threat detection to outpace phishing tactics and reduce human error. Understand the psychological triggers behind phishing attacks

React to this headline:

Rethinking the Human Factor in Cybersecurity Read More »

Pixel-Perfect Trap: The Surge of SVG-Borne Phishing Attacks

email security, Vulnerabilities / SecurityTicks

Pixel-Perfect Trap: The Surge of SVG-Borne Phishing Attacks 2025-04-10 at 23:16 By Bernard Bautista and Kevin Adriano Ever thought an image file could be part of a cyber threat? The Trustwave SpiderLabs Email Security team has identified a major spike in SVG image-based attacks, where harmless-looking graphics are being used to hide dangerous links. This

React to this headline:

Pixel-Perfect Trap: The Surge of SVG-Borne Phishing Attacks Read More »

Tycoon2FA New Evasion Technique for 2025

email security, Emerging Threats, News / SecurityTicks

Tycoon2FA New Evasion Technique for 2025 2025-04-10 at 19:36 By Phil Hay, Rodel Mendrez The Tycoon 2FA phishing kit has adopted several new evasion techniques aimed at slipping past endpoints and detection systems. These include using a custom CAPTCHA rendered via HTML5 canvas, invisible Unicode characters in obfuscated JavaScript, and anti-debugging scripts to thwart inspection.

React to this headline:

Tycoon2FA New Evasion Technique for 2025 Read More »

AI Now Outsmarts Humans in Spear Phishing, Analysis Shows

agentic AI, artificial inteligence, Artificial Intelligence, cybercrime, email security, phishing / SecurityTicks

AI Now Outsmarts Humans in Spear Phishing, Analysis Shows 2025-04-09 at 20:02 By Kevin Townsend Agentic AI has improved spear phishing effectiveness by 55% since 2023, research shows. The post AI Now Outsmarts Humans in Spear Phishing, Analysis Shows appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

AI Now Outsmarts Humans in Spear Phishing, Analysis Shows Read More »

Treasury’s OCC Says Hackers Had Access to 150,000 Emails

email security, Featured, Government, OCC, Treasury / SecurityTicks

Treasury’s OCC Says Hackers Had Access to 150,000 Emails 2025-04-09 at 14:48 By Eduard Kovacs The Office of the Comptroller of the Currency (OCC) has disclosed an email security incident in which 100 accounts were compromised for over a year. The post Treasury’s OCC Says Hackers Had Access to 150,000 Emails appeared first on SecurityWeek.

React to this headline:

Treasury’s OCC Says Hackers Had Access to 150,000 Emails Read More »

CRM, Bulk Email Providers Targeted in Crypto Phishing Campaign

Email, email security, phishing / SecurityTicks

CRM, Bulk Email Providers Targeted in Crypto Phishing Campaign 2025-04-07 at 15:05 By Ionut Arghire ‘PoisonSeed’ phishing campaign targets CRM and bulk email providers to distribute “crypto seed phrase” messages. The post CRM, Bulk Email Providers Targeted in Crypto Phishing Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

CRM, Bulk Email Providers Targeted in Crypto Phishing Campaign Read More »

Phishing Attacks Are Evolving – Is Your Email Security Keeping Up?

email security, Tips & Tricks / SecurityTicks

Phishing Attacks Are Evolving – Is Your Email Security Keeping Up? 2025-04-04 at 16:02 By Craig Searle Phishing attacks cost businesses millions—learn why email security is about more than just passing a test. Strengthen your email security culture with leadership support, continuous training, and adaptive strategies. Discover how Trustwave MailMarshal enhances email security by blocking phishing threats before they reach your inbox. A

React to this headline:

Phishing Attacks Are Evolving – Is Your Email Security Keeping Up? Read More »

Trustwave Named a Top Player in Radicati’s Secure Email Market Quadrant 2025 Report

email security, News, Reports, Spotlights / SecurityTicks

Trustwave Named a Top Player in Radicati’s Secure Email Market Quadrant 2025 Report 2025-04-02 at 16:11 By Trustwave MailMarshal fortified its position as a leading secure email gateway by being named a Top Player in Radicati’s Secure Email Market Quadrant 2025 report. This article is an excerpt from Trustwave Blog View Original Source React to this

React to this headline:

Trustwave Named a Top Player in Radicati’s Secure Email Market Quadrant 2025 Report Read More »

Google is making sending end-to-end encrypted emails easy

Don't miss, email security, Encryption, enterprise, Gmail, Google Workspace, Hot stuff, News, Outlook, Privacy, secure communications, SMBs / SecurityTicks

Google is making sending end-to-end encrypted emails easy 2025-04-02 at 15:03 By Zeljka Zorz Sending end-to-end encrypted (E2EE) emails from Gmail enterprise accounts is about to become much easier than it is now, Google has announced on Tuesday. The company will first make available this simplified capability to users who want to send E2EE emails

React to this headline:

Google is making sending end-to-end encrypted emails easy Read More »

Google Brings End-to-End Encrypted Emails to All Enterprise Gmail Users

E2EE, email security, Encryption, Gmail, Google / SecurityTicks

Google Brings End-to-End Encrypted Emails to All Enterprise Gmail Users 2025-04-02 at 13:05 By Ionut Arghire Gmail now allows enterprise users to send end-to-end encrypted emails to colleagues, and will soon allow sending to any inbox. The post Google Brings End-to-End Encrypted Emails to All Enterprise Gmail Users appeared first on SecurityWeek. This article is

React to this headline:

Google Brings End-to-End Encrypted Emails to All Enterprise Gmail Users Read More »