email security

Microsoft Struggles to Restore Email and Other Services in a Global Outage

email security, Microsoft /

Microsoft Struggles to Restore Email and Other Services in a Global Outage 2026-11-13 at 16:05 By Associated Press Microsoft is trying different ways to identify the cause of the problem and get its servers back online, using “a measured approach to identify and repair affected infrastructure.” The post Microsoft Struggles to Restore Email and Other […]

Microsoft Struggles to Restore Email and Other Services in a Global Outage Read More »

Recently Patched Barracuda Vulnerabilities Exploited in Attacks

Barracuda, CISA KEV, email security, ESG, exploited, Vulnerabilities, vulnerability /

Recently Patched Barracuda Vulnerabilities Exploited in Attacks 2026-11-11 at 09:53 By Ionut Arghire The security defects could allow attackers to bypass authorization and gain root access to devices. The post Recently Patched Barracuda Vulnerabilities Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Recently Patched Barracuda Vulnerabilities Exploited in Attacks Read More »

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs

cybercrime, Don't miss, email security, enterprise, ESET, EU, Government, government-backed attacks, Hot stuff, Malware, Microsoft Exchange, News, Russian Federation, Threat Intelligence, threats /

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs 2026-11-10 at 12:00 By Mirko Zorz Russia-aligned group Turla planted a modular .NET toolset on Microsoft Exchange servers at two government organizations, one in Kazakhstan and one in Romania, and used it to copy selected email straight out of the mail flow. ESET researchers found […]

Turla’s Cereal malware turns victims’ Exchange servers into spy hubs Read More »

Barracuda ESG Authentication Bypass Flaw Opens Path to Root

Barracuda, email security, ESG, Vulnerabilities, vulnerability /

Barracuda ESG Authentication Bypass Flaw Opens Path to Root 2026-11-04 at 16:24 By Eduard Kovacs An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances. The post Barracuda ESG Authentication Bypass Flaw Opens Path to Root appeared first on SecurityWeek. This article is an excerpt […]

Barracuda ESG Authentication Bypass Flaw Opens Path to Root Read More »

Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support

Arctic Wolf Networks, cybercrime, email security, Microsoft Teams, News, social engineering /

Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support 2026-10-27 at 16:16 By Sinisa Markovic Threat actors are flooding employees’ inboxes with spam and then contacting them on Microsoft Teams as IT support, offering to fix the problem they created, Arctic Wolf has found. The security company documented more […]

Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support Read More »

Fortinet patches critical FortiOS flaws found with AI help

AI, Don't miss, email security, firewall, Fortinet, Hot stuff, log management, News, security testing, security update, vulnerability, vulnerability disclosure /

Fortinet patches critical FortiOS flaws found with AI help 2026-10-26 at 13:22 By Zeljka Zorz Fortinet rolled out security hardening updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator last week, but is keeping the details about the fixed vulnerabilities under wraps until November 10, 2026. The vulnerabilities were uncovered with the help of AI models […]

Fortinet patches critical FortiOS flaws found with AI help Read More »

Microsoft 365 accounts compromised at 79 organizations, no passwords needed

cybercrime, Don't miss, email security, Hot stuff, Huntress, Microsoft 365, News, phishing /

Microsoft 365 accounts compromised at 79 organizations, no passwords needed 2026-10-23 at 14:45 By Sinisa Markovic An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims from seeing parts of their own mail, according to Huntress. The researchers […]

Microsoft 365 accounts compromised at 79 organizations, no passwords needed Read More »

Quarantined, but still on your calendar: The explosion of invite-based attacks

Check Point, Don't miss, email security, Hot stuff, News, phishing, Sublime Security /

Quarantined, but still on your calendar: The explosion of invite-based attacks 2026-10-20 at 15:18 By Zeljka Zorz There has been a sharp escalation in attacks that use malicious calendar invites to reach targets, email security providers Check Point and Sublime Security have warned. Sublime recorded a 1,216% month-over-month increase in August 2026, and the first […]

Quarantined, but still on your calendar: The explosion of invite-based attacks Read More »

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Cisco, email security, exploited, Featured, Vulnerabilities, vulnerability /

Cisco Warns of Exploited Secure Email Gateway Vulnerability 2026-10-15 at 09:34 By Ionut Arghire Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges. The post Cisco Warns of Exploited Secure Email Gateway Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Warns of Exploited Secure Email Gateway Vulnerability Read More »

Product showcase: SimpleLogin keeps your email address private with aliases

email security, identity protection, News, Product showcase, Proton /

Product showcase: SimpleLogin keeps your email address private with aliases 2026-10-09 at 11:51 By Anamarija Pogorelec SimpleLogin is an email alias service from Proton that forwards messages to an existing mailbox. Users create addresses for registrations, purchases, and correspondence, giving them control over where their primary email address is shared. The service is open source […]

Product showcase: SimpleLogin keeps your email address private with aliases Read More »

Roundcube Webmail Vulnerability in Attackers’ Crosshairs

email security, exploited, Featured, Roundcube, Vulnerabilities, vulnerability /

Roundcube Webmail Vulnerability in Attackers’ Crosshairs 2026-09-25 at 09:57 By Ionut Arghire Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication. The post Roundcube Webmail Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Roundcube Webmail Vulnerability in Attackers’ Crosshairs Read More »

File Acquisition May Be Recorded as “FileAccessed” in Microsoft 365 (“M365”)

email security, Emerging Threats /

File Acquisition May Be Recorded as “FileAccessed” in Microsoft 365 (“M365”) 2026-09-24 at 15:30 By A recent trend has emerged where threat actor groups (e.g., ShinyHunters, PEAR, HELIX, etc.) have been leveraging phishing and vishing techniques to gain access to M365 email accounts. Through identity and token abuse, these actors have then automated large-scale file […]

File Acquisition May Be Recorded as “FileAccessed” in Microsoft 365 (“M365”) Read More »

Product showcase: Scamwise checks the red flags before you take the bait

Android, cybersecurity, Don't miss, email security, fraud, iOS, News, Product showcase, scams /

Product showcase: Scamwise checks the red flags before you take the bait 2026-09-23 at 08:00 By Anamarija Pogorelec Scamwise is a free scam-checking service from Savi that examines suspicious messages, emails, websites, phone numbers, images, and real-world situations for signs of fraud. The service works in any web browser on desktop, mobile, or tablet, with […]

Product showcase: Scamwise checks the red flags before you take the bait Read More »

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)

0-day, Cisco, Don't miss, email security, enterprise, Hot stuff, News, SMBs /

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461) 2026-09-15 at 14:09 By Zeljka Zorz Attackers have leveraged a zero-day SQL injection vulnerability (CVE-2026-76461) to compromise Cisco Secure Email Gateway appliances, Cisco confirmed on Monday. The vendor’s Product Security Incident Response Team became aware of active exploitation of this vulnerability in September 2025, and has shared […]

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461) Read More »

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation

Cisco, email security, exploited, Featured, Secure Email Gateway, Vulnerabilities, vulnerability, Zero-Day /

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation 2026-09-15 at 08:18 By Eduard Kovacs An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges. The post Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation appeared first on SecurityWeek. This article is an […]

Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation Read More »

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack

Brevo, Cryptocurrency, data breach, Data Breaches, email security, phishing, Trezor /

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack 2026-09-11 at 15:48 By Eduard Kovacs Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and CoinTracking. The post Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack appeared first on SecurityWeek. This article […]

Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack Read More »

Unpatched Zimbra servers are falling to CVE-2026-73570 attacks

CERT-PL, CISA, collaboration, Don't miss, email security, exploit, Hot stuff, News, Shadowserver, Synacor, vulnerability /

Unpatched Zimbra servers are falling to CVE-2026-73570 attacks 2026-08-25 at 13:03 By Zeljka Zorz At least 274 internet-facing Zimbra instances have been compromised by unknown attackers via CVE-2026-73570, the Shadowserver Foundation shared on Monday. About CVE-2026-73570 Zimbra Collaboration Suite (ZCS) is a communication and collaboration platform popular with organizations that need to have control over […]

Unpatched Zimbra servers are falling to CVE-2026-73570 attacks Read More »

Beyond the Inbox: How BEC Leads to SSO Abuse

email security, Emerging Threats, Vulnerabilities /

Beyond the Inbox: How BEC Leads to SSO Abuse 2026-08-13 at 20:40 By Jamie Mamroe and Federico Cedolini For years, many business email compromise (BEC) investigations have followed a familiar playbook: an attacker phishes credentials, logs into the victim’s mailbox, establishes persistence with inbox rules, monitors communications, and waits for an opportunity to steal money […]

Beyond the Inbox: How BEC Leads to SSO Abuse Read More »

The Infrastructure Relay: Inside Multi-Stage Phishing Redirection Chains

email security, Emerging Threats /

The Infrastructure Relay: Inside Multi-Stage Phishing Redirection Chains 2026-08-12 at 16:42 By Karla Agregado To stay ahead of evolving threats, LevelBlue utilizes a machine-learning-based URL scanner that constantly evaluates the digital landscape. We closely monitor VirusTotal for instances where LevelBlue acts as the sole detection layer — a crucial tactic for spotting new phishing campaigns […]

The Infrastructure Relay: Inside Multi-Stage Phishing Redirection Chains Read More »

Scroll to Top