email security - Security Ticks

Roundcube flaws allow easy email account compromise (CVE-2024-42009, CVE-2024-42008)

CVE, Don't miss, email security, Hot stuff, News, Roundcube, security update, SonarSource, vulnerability / SecurityTicks

Roundcube flaws allow easy email account compromise (CVE-2024-42009, CVE-2024-42008) 2024-08-07 at 12:01 By Zeljka Zorz Two cross-site scripting vulnerabilities (CVE-2024-42009, CVE-2024-42008) affecting Roundcube could be exploited by attackers to steal users’ emails and contacts, email password, and send emails from their account. About the vulnerabilities Roundcube is an open-source webmail software solution popular with European […]

React to this headline:

Roundcube flaws allow easy email account compromise (CVE-2024-42009, CVE-2024-42008) Read More »

Abnormal Security Raises $250 Million at $5.1 Billion Valuation

Abnormal Security, Cybersecurity Funding, Email, email security, funding / SecurityTicks

Abnormal Security Raises $250 Million at $5.1 Billion Valuation 2024-08-06 at 15:16 By Eduard Kovacs Email security firm Abnormal Security has raised $250 million in a Series D funding round at a $5.1 billion valuation. The post Abnormal Security Raises $250 Million at $5.1 Billion Valuation appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Abnormal Security Raises $250 Million at $5.1 Billion Valuation Read More »

Email attacks skyrocket 293%

Acronis, Artificial Intelligence, attacks, cybersecurity, email security, MSP, News, Ransomware, report, social engineering / SecurityTicks

Email attacks skyrocket 293% 2024-08-06 at 06:31 By Help Net Security Email attacks have surged by 293% in the first half of 2024 compared to the same period in 2023, according to Acronis. The number of ransomware detections was also on the rise, increasing 32% from Q4 2023 to Q1 2024. Ransomware remains a top

React to this headline:

Email attacks skyrocket 293% Read More »

Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains

Email, email authentication, email security, spoofing / SecurityTicks

Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains 2024-07-31 at 18:01 By Ionut Arghire Vulnerabilities in hosted email services allow attackers to spoof the identity of senders, bypassing security measures. The post Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains Read More »

Phishing Campaign Exploited Proofpoint Email Protections for Spoofing

EchoSpoofing, email security, phishing, Proofpoint, spoofing / SecurityTicks

Phishing Campaign Exploited Proofpoint Email Protections for Spoofing 2024-07-29 at 21:46 By Ionut Arghire Threat actors have exploited Proofpoint’s email protection service to deliver millions of spoofed phishing emails. The post Phishing Campaign Exploited Proofpoint Email Protections for Spoofing appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Phishing Campaign Exploited Proofpoint Email Protections for Spoofing Read More »

Cisco fixes critical flaws in Secure Email Gateway and SSM On-Prem (CVE-2024-20401, CVE-2024-20419)

Cisco, Don't miss, email security, Hot stuff, News, security update, vulnerability / SecurityTicks

Cisco fixes critical flaws in Secure Email Gateway and SSM On-Prem (CVE-2024-20401, CVE-2024-20419) 2024-07-18 at 12:16 By Zeljka Zorz Cisco has fixed two critical vulnerabilities that may allow attackers to overwrite files on its Secure Email Gateways (CVE-2024-20401) and change the password of any user on its Smart Software Manager On-Prem license servers (CVE-2024-20419). Neither

React to this headline:

Cisco fixes critical flaws in Secure Email Gateway and SSM On-Prem (CVE-2024-20401, CVE-2024-20419) Read More »

Critical Exim vulnerability facilitates malware delivery (CVE-2024-39929)

Censys, CVE, Don't miss, email security, Exim, Hot stuff, Malware, News, vulnerability / SecurityTicks

Critical Exim vulnerability facilitates malware delivery (CVE-2024-39929) 2024-07-15 at 14:20 By Zeljka Zorz The maintainers of the Exim mail transfer agent (MTA) have fixed a critical vulnerability (CVE-2024-39929) that currently affects around 1.5 million public-facing servers and can help attackers deliver malware to users. About CVE-2024-39929 The vulnerability stems from a bug in RFC 2231

React to this headline:

Critical Exim vulnerability facilitates malware delivery (CVE-2024-39929) Read More »

Critical Exim Flaw Allows Attackers to Deliver Malicious Executables to Mailboxes

email security, Exim, Vulnerabilities, vulnerability / SecurityTicks

Critical Exim Flaw Allows Attackers to Deliver Malicious Executables to Mailboxes 2024-07-12 at 18:31 By Ionut Arghire Successful exploitation could allow attackers to deliver executable attachments to inboxes. The post Critical Exim Flaw Allows Attackers to Deliver Malicious Executables to Mailboxes appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Critical Exim Flaw Allows Attackers to Deliver Malicious Executables to Mailboxes Read More »

Information of Hundreds of European Politicians Found on Dark Web

Email, email security, Government / SecurityTicks

Information of Hundreds of European Politicians Found on Dark Web 2024-05-31 at 14:46 By Eduard Kovacs The email addresses and other information of hundreds of British, French and EU politicians have been found on the dark web. The post Information of Hundreds of European Politicians Found on Dark Web appeared first on SecurityWeek. This article

React to this headline:

Information of Hundreds of European Politicians Found on Dark Web Read More »

Product showcase: Alert – Data breach detector for your email, credit card, and ID

credentials, data breach, Don't miss, email security, Hot stuff, News, Product showcase, Surfshark / SecurityTicks

Product showcase: Alert – Data breach detector for your email, credit card, and ID 2024-05-24 at 08:31 By Help Net Security Compared to the last quarter of 2023, data breaches rose from 81M to 435M in Q1 2024. That’s a 5-fold increase in just a few months. One of the most common ways data breaches

React to this headline:

Product showcase: Alert – Data breach detector for your email, credit card, and ID Read More »

CISOs pursuing AI readiness should start by updating the org’s email security policy

Artificial Intelligence, CISO, cybersecurity, Don't miss, email security, Expert analysis, Expert corner, generative AI, Hot stuff, Ironscales, News, opinion, policy / SecurityTicks

CISOs pursuing AI readiness should start by updating the org’s email security policy 2024-05-23 at 08:03 By Anamarija Pogorelec Over the past few years, traditional phishing messages — with their pervasive linguistic errors, thinly-veiled malicious payloads, and often outlandish pretexts — have been on the decline. Easily detected by most of today’s standard email security

React to this headline:

CISOs pursuing AI readiness should start by updating the org’s email security policy Read More »

US Says North Korean Hackers Exploiting Weak DMARC Settings

APT, DMARC, email security, Featured, Kimsuky, Malware & Threats, Nation-State, North Korea / SecurityTicks

US Says North Korean Hackers Exploiting Weak DMARC Settings 2024-05-03 at 19:16 By Ionut Arghire The US government warns of a North Korean threat actor abusing weak email DMARC settings to hide spear-phishing attacks. The post US Says North Korean Hackers Exploiting Weak DMARC Settings appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

US Says North Korean Hackers Exploiting Weak DMARC Settings Read More »

56% of cyber insurance claims originate in the email inbox

BEC scams, Coalition, cybersecurity, email security, firewall, Insurance, News, Ransomware, report, survey, VPN / SecurityTicks

56% of cyber insurance claims originate in the email inbox 2024-04-25 at 13:01 By Help Net Security 56% of all 2023 claims were a result of funds transfer fraud (FTF) or business email compromise (BEC), highlighting the importance of email security as a critical aspect of cyber risk management, according to Coalition. The 2024 Cyber

React to this headline:

56% of cyber insurance claims originate in the email inbox Read More »

KnowBe4 Plans to Acquire Egress for Email Security Tech

awareness training, Egress, Email, email security, KnowBe4, M&A Tracker, phishing / SecurityTicks

KnowBe4 Plans to Acquire Egress for Email Security Tech 2024-04-24 at 19:16 By Ryan Naraine KnowBe4 boasts that the merger will create “the largest, advanced AI-driven cybersecurity platform for managing human risk.” The post KnowBe4 Plans to Acquire Egress for Email Security Tech appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

KnowBe4 Plans to Acquire Egress for Email Security Tech Read More »

IMF Emails Hacked

Email, email security, Featured, IMF / SecurityTicks

IMF Emails Hacked 2024-03-18 at 10:28 By Eduard Kovacs The International Monetary Fund (IMF) detects a cybersecurity incident that involved nearly a dozen email accounts getting hacked. The post IMF Emails Hacked appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React to this headline:

React to this headline:

IMF Emails Hacked Read More »

Image-based phishing tactics evolve

cybercrime, cybersecurity, email security, Ironscales, News, Osterman Research, phishing, QR codes, report, survey / SecurityTicks

Image-based phishing tactics evolve 2024-03-12 at 06:00 By Help Net Security While 70% of organizations feel their current security stacks are effective against image-based and QR code phishing attacks, 76% were still compromised in the last 12 months, according to IRONSCALES and Osterman Research. IT pros are highly aware of emerging types of phishing attacks

React to this headline:

Image-based phishing tactics evolve Read More »

Email security trends in the energy and infrastructure sector

Abnormal Security, attacks, BEC scams, critical infrastructure, cybersecurity, Don't miss, Email, email security, energy sector, Hot stuff, risk, Video / SecurityTicks

Email security trends in the energy and infrastructure sector 2024-03-11 at 09:07 By Help Net Security In this Help Net Security video, Mike Britton, CISO at Abnormal Security, discusses how energy and infrastructure organizations face an increased risk of business email compromise and vendor email compromise attacks. According to Abnormal Security data, from February 2023

React to this headline:

Email security trends in the energy and infrastructure sector Read More »

Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks

BEC, cybercrime, email security, phishing / SecurityTicks

Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks 2024-03-07 at 16:40 By Ionut Arghire Threat actor tracked as TA4903 spoofing US government entities in phishing and fraud campaigns. The post Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Cybercriminals Spoof US Government Organizations in BEC, Phishing Attacks Read More »

Discount Retail Giant Pepco Loses €15 Million to Cybercriminals

BEC, cybercrime, email security, phishing / SecurityTicks

Discount Retail Giant Pepco Loses €15 Million to Cybercriminals 2024-02-29 at 17:46 By Eduard Kovacs European discount retailer Pepco has lost €15.5 million as a result of what it described as a phishing attack. The post Discount Retail Giant Pepco Loses €15 Million to Cybercriminals appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Discount Retail Giant Pepco Loses €15 Million to Cybercriminals Read More »

Domains Once Owned by Major Firms Help Millions of Spam Emails Bypass Security

Email, email authentication, email security, spam / SecurityTicks

Domains Once Owned by Major Firms Help Millions of Spam Emails Bypass Security 2024-02-27 at 16:46 By Eduard Kovacs 8,800 domains, many once owned by major companies, have been abused to get millions of emails past spam filters as part of SubdoMailing campaign. The post Domains Once Owned by Major Firms Help Millions of Spam

React to this headline:

Domains Once Owned by Major Firms Help Millions of Spam Emails Bypass Security Read More »