Fresh SmarterMail Flaw Exploited for Admin Access 2026-01-23 at 12:46 By Ionut Arghire The exploitation of the authentication bypass vulnerability started two days after patches were released. The post Fresh SmarterMail Flaw Exploited for Admin Access appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Fresh SmarterMail Flaw Exploited for Admin Access Read More »
Webinar Today: Rethinking Email Security for Mid-Sized Organizations 2026-01-22 at 17:22 By SecurityWeek News See how modern AI-driven detection can block sophisticated attacks that traditional tools miss The post Webinar Today: Rethinking Email Security for Mid-Sized Organizations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Webinar Today: Rethinking Email Security for Mid-Sized Organizations Read More »
Cisco fixes AsyncOS vulnerability exploited in zero-day attacks (CVE-2025-20393) 2026-01-16 at 17:05 By Zeljka Zorz Cisco has finally shipped security updates for its Email Security Gateway and Secure Email and Web Manager devices, which fix CVE-2025-20393, a vulnerability in the devices’ AsyncOS that has been exploited as a zero-day by suspected Chinese attackers since at […]
Cisco fixes AsyncOS vulnerability exploited in zero-day attacks (CVE-2025-20393) Read More »
Complex Routing, Misconfigurations Exploited for Domain Spoofing in Phishing Attacks 2026-01-07 at 13:46 By Ionut Arghire Threat actors spoof legitimate domains to make their phishing emails appear to have been sent internally. The post Complex Routing, Misconfigurations Exploited for Domain Spoofing in Phishing Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Complex Routing, Misconfigurations Exploited for Domain Spoofing in Phishing Attacks Read More »
What security teams miss in email attacks 2026-01-06 at 07:10 By Anamarija Pogorelec Email remains the most common entry point for attackers. This article examines how phishing, impersonation, and account takeover continue to drive email breaches and expose growing security gaps across industries. Email blind spots are back to bite security teams Email remains the […]
What security teams miss in email attacks Read More »
Cisco email security appliances rooted and backdoored via still unpatched zero-day 2025-12-17 at 21:47 By Zeljka Zorz A suspected Chinese-nexus threat group has been compromising Cisco email security devices and planting backdoors and log-purging tools on them since at least late November 2025, Cisco Talos researchers have shared. “Our analysis indicates that appliances with non-standard […]
Cisco email security appliances rooted and backdoored via still unpatched zero-day Read More »
Email blind spots are back to bite security teams 2025-11-24 at 07:04 By Anamarija Pogorelec The threat landscape is forcing CISOs to rethink what they consider normal. The latest Cybersecurity Report 2026 by Hornetsecurity, based on analysis of more than 70 billion emails and broad threat telemetry, shows attackers adopting automation, AI driven social engineering, […]
Email blind spots are back to bite security teams Read More »
Humans built the problem, AI just scaled it 2025-11-06 at 08:04 By Anamarija Pogorelec Information moves across cloud platforms, personal devices, and AI tools, often faster than security teams can track it. Proofpoint’s 2025 Data Security Landscape report shows that most organizations faced data loss last year, usually caused by their own people. With AI […]
Humans built the problem, AI just scaled it Read More »
CISA and partners take action as Microsoft Exchange security risks mount 2025-10-31 at 19:32 By Zeljka Zorz In partnership with international cybersecurity agencies, the US Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) outlined security best practices for organizations that use on-premises versions of Microsoft Exchange Server. Microsoft Exchange servers are […]
CISA and partners take action as Microsoft Exchange security risks mount Read More »
Email breaches are the silent killers of business growth 2025-10-30 at 07:16 By Anamarija Pogorelec 78% of organizations were hit by an email breach in the past 12 months, according to the Email Security Breach Report 2025 by Barracuda. Phishing, impersonation, and account takeover continue to drive incidents that often lead to ransomware and data […]
Email breaches are the silent killers of business growth Read More »
Sublime Security Raises $150 Million for Email Security Platform 2025-10-28 at 15:09 By Eduard Kovacs Sublime Security’s Series C funding round brings the total raised by the company to more than $240 million. The post Sublime Security Raises $150 Million for Email Security Platform appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
Sublime Security Raises $150 Million for Email Security Platform Read More »
Proxmox Mail Gateway: Open-source email security solution reaches version 9.0 2025-10-06 at 08:06 By Anamarija Pogorelec First released in 2005, the open-source Proxmox Mail Gateway has become a widely adopted mail proxy, positioned between the firewall and the internal mail server to stop threats before they reach users. The platform delivers anti-spam and antivirus filtering […]
Proxmox Mail Gateway: Open-source email security solution reaches version 9.0 Read More »
How attackers poison AI tools and defenses 2025-09-29 at 09:06 By Help Net Security Cyberattackers are using generative AI to draft polished spam, create malicious code and write persuasive phishing lures. They are also learning how to turn AI systems themselves into points of compromise. Recent findings highlight this shift. Researchers from Columbia University and […]
How attackers poison AI tools and defenses Read More »
Libraesva ESG zero-day vulnerability exploited by attackers (CVE-2025-59689) 2025-09-24 at 15:17 By Zeljka Zorz Suspected state-sponsored attackers have exploited a zero-day vulnerability (CVE-2025-59689) in the Libraesva Email Security Gateway (ESG), the Italian email security company has confirmed. About CVE-2025-59689 CVE-2025-59689 is a command injection vulnerability caused by improper sanitization when removing active code from files […]
Libraesva ESG zero-day vulnerability exploited by attackers (CVE-2025-59689) Read More »
Libraesva Email Security Gateway Vulnerability Exploited by Nation-State Hackers 2025-09-24 at 12:10 By Ionut Arghire Tracked as CVE-2025-59689, the command injection bug could be triggered via malicious emails containing crafted compressed attachments. The post Libraesva Email Security Gateway Vulnerability Exploited by Nation-State Hackers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
Libraesva Email Security Gateway Vulnerability Exploited by Nation-State Hackers Read More »
Email Security Startup AegisAI Launches With $13 Million in Funding 2025-09-11 at 14:20 By Ionut Arghire AegisAI uses autonomous AI agents to prevent phishing, malware, and BEC attacks from reaching inboxes. The post Email Security Startup AegisAI Launches With $13 Million in Funding appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
Email Security Startup AegisAI Launches With $13 Million in Funding Read More »
The state of DMARC adoption: What 10M domains reveal 2025-09-11 at 07:43 By Help Net Security In this Help Net Security video, John Wilson, Senior Fellow, Threat Research at Fortra, explores the state of DMARC adoption across the top 10 million internet domains. He explains how SPF, DKIM, and DMARC work together to prevent email […]
The state of DMARC adoption: What 10M domains reveal Read More »
Varonis Acquires Email Security Firm SlashNext 2025-09-02 at 18:00 By SecurityWeek News The transaction is valued up to $150 million, including performance-based retention awards, a Varonis spokesperson told SecurityWeek. The post Varonis Acquires Email Security Firm SlashNext appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Varonis Acquires Email Security Firm SlashNext Read More »
Unraveling Phishing Campaigns Flagged by Trustwave’s URL Scanner 2025-08-28 at 19:03 By Karla Agregado In recent months, Trustwave SpiderLabs, A LevelBlue Company, saw a significant increase in phishing URLs containing familiar patterns, similar phishing templates, and a resurgence in the use of email marketing platforms. The use of URL redirectors, along with the abuse of […]
Unraveling Phishing Campaigns Flagged by Trustwave’s URL Scanner Read More »
Introducing D-Fence: MailMarshal’s Advanced Machine Learning Phishing Protection 2025-08-21 at 16:05 By MailMarshal’s new D-Fence layer uses machine learning to combat sophisticated phishing attacks by analyzing email structure and identifying hidden malicious elements. D-Fence provides next-generation email security by catching 40% more phishing emails that previously went undetected. D-Fence works with URLDeep to deliver powerful […]
Introducing D-Fence: MailMarshal’s Advanced Machine Learning Phishing Protection Read More »