email security

Microsoft 365 accounts compromised at 79 organizations, no passwords needed

cybercrime, Don't miss, email security, Hot stuff, Huntress, Microsoft 365, News, phishing /

Microsoft 365 accounts compromised at 79 organizations, no passwords needed 2026-10-23 at 14:45 By Sinisa Markovic An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims from seeing parts of their own mail, according to Huntress. The researchers […]

Microsoft 365 accounts compromised at 79 organizations, no passwords needed Read More »

Quarantined, but still on your calendar: The explosion of invite-based attacks

Check Point, Don't miss, email security, Hot stuff, News, phishing, Sublime Security /

Quarantined, but still on your calendar: The explosion of invite-based attacks 2026-10-20 at 15:18 By Zeljka Zorz There has been a sharp escalation in attacks that use malicious calendar invites to reach targets, email security providers Check Point and Sublime Security have warned. Sublime recorded a 1,216% month-over-month increase in August 2026, and the first […]

Quarantined, but still on your calendar: The explosion of invite-based attacks Read More »

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Cisco, email security, exploited, Featured, Vulnerabilities, vulnerability /

Cisco Warns of Exploited Secure Email Gateway Vulnerability 2026-10-15 at 09:34 By Ionut Arghire Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges. The post Cisco Warns of Exploited Secure Email Gateway Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Warns of Exploited Secure Email Gateway Vulnerability Read More »

Product showcase: SimpleLogin keeps your email address private with aliases

email security, identity protection, News, Product showcase, Proton /

Product showcase: SimpleLogin keeps your email address private with aliases 2026-10-09 at 11:51 By Anamarija Pogorelec SimpleLogin is an email alias service from Proton that forwards messages to an existing mailbox. Users create addresses for registrations, purchases, and correspondence, giving them control over where their primary email address is shared. The service is open source […]

Product showcase: SimpleLogin keeps your email address private with aliases Read More »

Roundcube Webmail Vulnerability in Attackers’ Crosshairs

email security, exploited, Featured, Roundcube, Vulnerabilities, vulnerability /

Roundcube Webmail Vulnerability in Attackers’ Crosshairs 2026-09-25 at 09:57 By Ionut Arghire Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication. The post Roundcube Webmail Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Roundcube Webmail Vulnerability in Attackers’ Crosshairs Read More »

File Acquisition May Be Recorded as “FileAccessed” in Microsoft 365 (“M365”)

email security, Emerging Threats /

File Acquisition May Be Recorded as “FileAccessed” in Microsoft 365 (“M365”) 2026-09-24 at 15:30 By A recent trend has emerged where threat actor groups (e.g., ShinyHunters, PEAR, HELIX, etc.) have been leveraging phishing and vishing techniques to gain access to M365 email accounts. Through identity and token abuse, these actors have then automated large-scale file […]

File Acquisition May Be Recorded as “FileAccessed” in Microsoft 365 (“M365”) Read More »

Product showcase: Scamwise checks the red flags before you take the bait

Android, cybersecurity, Don't miss, email security, fraud, iOS, News, Product showcase, scams /

Product showcase: Scamwise checks the red flags before you take the bait 2026-09-23 at 08:00 By Anamarija Pogorelec Scamwise is a free scam-checking service from Savi that examines suspicious messages, emails, websites, phone numbers, images, and real-world situations for signs of fraud. The service works in any web browser on desktop, mobile, or tablet, with […]

Product showcase: Scamwise checks the red flags before you take the bait Read More »

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)

0-day, Cisco, Don't miss, email security, enterprise, Hot stuff, News, SMBs /

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461) 2026-09-15 at 14:09 By Zeljka Zorz Attackers have leveraged a zero-day SQL injection vulnerability (CVE-2026-76461) to compromise Cisco Secure Email Gateway appliances, Cisco confirmed on Monday. The vendor’s Product Security Incident Response Team became aware of active exploitation of this vulnerability in September 2025, and has shared […]

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461) Read More »

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation

Cisco, email security, exploited, Featured, Secure Email Gateway, Vulnerabilities, vulnerability, Zero-Day /

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation 2026-09-15 at 08:18 By Eduard Kovacs An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges. The post Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation appeared first on SecurityWeek. This article is an […]

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation Read More »

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack

Brevo, Cryptocurrency, data breach, Data Breaches, email security, phishing, Trezor /

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack 2026-09-11 at 15:48 By Eduard Kovacs Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and CoinTracking. The post Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack appeared first on SecurityWeek. This article […]

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack Read More »

Unpatched Zimbra servers are falling to CVE-2026-73570 attacks

CERT-PL, CISA, collaboration, Don't miss, email security, exploit, Hot stuff, News, Shadowserver, Synacor, vulnerability /

Unpatched Zimbra servers are falling to CVE-2026-73570 attacks 2026-08-25 at 13:03 By Zeljka Zorz At least 274 internet-facing Zimbra instances have been compromised by unknown attackers via CVE-2026-73570, the Shadowserver Foundation shared on Monday. About CVE-2026-73570 Zimbra Collaboration Suite (ZCS) is a communication and collaboration platform popular with organizations that need to have control over […]

Unpatched Zimbra servers are falling to CVE-2026-73570 attacks Read More »

Beyond the Inbox: How BEC Leads to SSO Abuse

email security, Emerging Threats, Vulnerabilities /

Beyond the Inbox: How BEC Leads to SSO Abuse 2026-08-13 at 20:40 By Jamie Mamroe and Federico Cedolini For years, many business email compromise (BEC) investigations have followed a familiar playbook: an attacker phishes credentials, logs into the victim’s mailbox, establishes persistence with inbox rules, monitors communications, and waits for an opportunity to steal money […]

Beyond the Inbox: How BEC Leads to SSO Abuse Read More »

The Infrastructure Relay: Inside Multi-Stage Phishing Redirection Chains

email security, Emerging Threats /

The Infrastructure Relay: Inside Multi-Stage Phishing Redirection Chains 2026-08-12 at 16:42 By Karla Agregado To stay ahead of evolving threats, LevelBlue utilizes a machine-learning-based URL scanner that constantly evaluates the digital landscape. We closely monitor VirusTotal for instances where LevelBlue acts as the sole detection layer — a crucial tactic for spotting new phishing campaigns […]

The Infrastructure Relay: Inside Multi-Stage Phishing Redirection Chains Read More »

Product showcase: Material unifies Google Workspace email, file & OAuth defense

email security, Google Workspace, Material Security, News, Product showcase /

Product showcase: Material unifies Google Workspace email, file & OAuth defense 2026-08-05 at 08:00 By Help Net Security Here’s an uncomfortable truth: the attack that gets you won’t look like an attack. It’ll look like a normal login, a normal file share, a normal permission request you clicked past without reading. You don’t have a […]

Product showcase: Material unifies Google Workspace email, file & OAuth defense Read More »

Weaponized Email AI Assistants Could Help Attackers Hijack Accounts

cybercrime, email security /

Weaponized Email AI Assistants Could Help Attackers Hijack Accounts 2026-08-04 at 16:54 By Kevin Townsend Researchers demonstrate how attackers could abuse built-in email chatbots to evade detection, impersonate trusted employees, compromise executive accounts, and facilitate financial fraud. The post Weaponized Email AI Assistants Could Help Attackers Hijack Accounts appeared first on SecurityWeek. This article is […]

Weaponized Email AI Assistants Could Help Attackers Hijack Accounts Read More »

Product showcase: Guardio Mobile Security turns breach alerts into a recovery plan

email security, iOS, iPhone, mobile security, network monitoring, News, scams /

Product showcase: Guardio Mobile Security turns breach alerts into a recovery plan 2026-08-03 at 07:30 By Anamarija Pogorelec Guardio Mobile Security brings several protection features to iPhone and Android, allowing users to monitor exposed personal information, identify phishing attempts, and receive alerts about emerging threats from a single application. It is available on smartphones and […]

Product showcase: Guardio Mobile Security turns breach alerts into a recovery plan Read More »

AegisAI Raises $36 Million for AI-Powered Email Security

AegisAI, Cybersecurity Funding, email security, funding /

AegisAI Raises $36 Million for AI-Powered Email Security 2026-07-24 at 15:01 By SecurityWeek News The company has raised a total of $49 million in funding, including from Battery Ventures, Accel and Foundation Capital. The post AegisAI Raises $36 Million for AI-Powered Email Security appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

AegisAI Raises $36 Million for AI-Powered Email Security Read More »

StrongestLayer Raises $4.1 Million in Seed Funding Extension

Cybersecurity Funding, email security, funding, StrongestLayer /

StrongestLayer Raises $4.1 Million in Seed Funding Extension 2026-07-22 at 16:00 By Ionut Arghire The startup will use the fresh investment to accelerate its go-to-market strategy and to expand its platform. The post StrongestLayer Raises $4.1 Million in Seed Funding Extension appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

StrongestLayer Raises $4.1 Million in Seed Funding Extension Read More »

Zimbra Patches Critical Code Execution Vulnerability

email security, patch, remote code execution, Vulnerabilities, vulnerability, Zimbra /

Zimbra Patches Critical Code Execution Vulnerability 2026-07-13 at 13:03 By Ionut Arghire The flaw results in malicious code embedded in crafted emails being executed when the emails are opened. The post Zimbra Patches Critical Code Execution Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Zimbra Patches Critical Code Execution Vulnerability Read More »

Scroll to Top