Email

Scams now operate like real businesses with budgets and targets

Scams now operate like real businesses with budgets and targets 2026-06-10 at 07:23 By Anamarija Pogorelec Social media has overtaken email as a primary attack vector, showing changes in how people consume information and interact online, according to Bitdefender’s Global Scam Intelligence Report 2026. Fraud campaigns use advertisements, sponsored content, impersonation pages, and direct messages […]

Scams now operate like real businesses with budgets and targets Read More »

Google brings instant email verification to Android, no OTP needed

Google brings instant email verification to Android, no OTP needed 2026-04-23 at 15:10 By Anamarija Pogorelec Google has introduced cryptographically verified email credentials for Android through the Credential Manager API. This API aligns with the W3C Digital Credential API standard. It provides a unified way for apps to request and retrieve user credentials for authentication

Google brings instant email verification to Android, no OTP needed Read More »

Thunderbird 150 arrives with encrypted message search and OpenPGP improvements

Thunderbird 150 arrives with encrypted message search and OpenPGP improvements 2026-04-21 at 23:32 By Anamarija Pogorelec Released today, Thunderbird 150.0 brings eight new features, a round of bug fixes, and security patches that cover the web engine underlying the email client. Thunderbird 150.0 runs on Windows 10 or later, macOS 10.15 or later, and Linux

Thunderbird 150 arrives with encrypted message search and OpenPGP improvements Read More »

Vulnerabilities from years ago still opening doors for attackers

Vulnerabilities from years ago still opening doors for attackers 2026-03-24 at 14:02 By Sinisa Markovic Exploitation timelines continued to compress in enterprise environments, with newly disclosed flaws reaching active use almost immediately and older weaknesses remaining active years after disclosure. (Source: Cisco Talos) Findings from Cisco Talos’ 2025 Year in Review show how attackers combined

Vulnerabilities from years ago still opening doors for attackers Read More »

Clipping Scripted Sparrow’s wings: Tracking a global phishing ring

Clipping Scripted Sparrow’s wings: Tracking a global phishing ring 2025-12-18 at 16:12 By Help Net Security Between June 2024 and December 2025, Fortra analysts tracked a persistent business email compromise (BEC) operation that we have now classified as Scripted Sparrow. The group carries out well-crafted highly targeted phishing campaigns that masquerade as professional services firms

Clipping Scripted Sparrow’s wings: Tracking a global phishing ring Read More »

Product showcase: Tuta – secure, encrypted, private email

Product showcase: Tuta – secure, encrypted, private email 2025-12-11 at 08:13 By Help Net Security Tuta, formerly known as Tutanota, is built for anyone who wants email that stays private. Instead of treating encryption like a bonus feature, the service encrypts almost everything by default. That means your messages are locked down from the moment

Product showcase: Tuta – secure, encrypted, private email Read More »

Proxmox Mail Gateway: Open-source email security solution reaches version 9.0

Proxmox Mail Gateway: Open-source email security solution reaches version 9.0 2025-10-06 at 08:06 By Anamarija Pogorelec First released in 2005, the open-source Proxmox Mail Gateway has become a widely adopted mail proxy, positioned between the firewall and the internal mail server to stop threats before they reach users. The platform delivers anti-spam and antivirus filtering

Proxmox Mail Gateway: Open-source email security solution reaches version 9.0 Read More »

Microsoft urges admins to plug severe Exchange security hole (CVE-2025-53786)

Microsoft urges admins to plug severe Exchange security hole (CVE-2025-53786) 2025-08-07 at 17:40 By Zeljka Zorz “In an Exchange hybrid deployment, an attacker who first gains administrative access to an on-premises Exchange server could potentially escalate privileges within the organization’s connected cloud environment without leaving easily detectable and auditable trace,” Microsoft has announced on Wednesday.

Microsoft urges admins to plug severe Exchange security hole (CVE-2025-53786) Read More »

Microsoft introduces protection against email bombing

Microsoft introduces protection against email bombing 2025-07-01 at 18:54 By Zeljka Zorz By the end of July 2025, all Microsoft Defender for Office 365 customers should be protected from email bombing attacks by default, Microsoft has announced on Monday. What is email bombing? Email bombing (aka spam bombing) is an attack technique that results in

Microsoft introduces protection against email bombing Read More »

Employees repeatedly fall for vendor email compromise attacks

Employees repeatedly fall for vendor email compromise attacks 2025-06-09 at 07:02 By Help Net Security In just 12 months, attackers attempted to steal more than $300 million via vendor email compromise (VEC), with 7% of engagements coming from employees who had engaged with a previous attack, according to Abnormal AI. Vendor email compromise risks increase

Employees repeatedly fall for vendor email compromise attacks Read More »

CRM, Bulk Email Providers Targeted in Crypto Phishing Campaign

CRM, Bulk Email Providers Targeted in Crypto Phishing Campaign 2025-04-07 at 15:05 By Ionut Arghire ‘PoisonSeed’ phishing campaign targets CRM and bulk email providers to distribute “crypto seed phrase” messages. The post CRM, Bulk Email Providers Targeted in Crypto Phishing Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CRM, Bulk Email Providers Targeted in Crypto Phishing Campaign Read More »

Only 1% of malicious emails that reach inboxes deliver malware

Only 1% of malicious emails that reach inboxes deliver malware 2025-04-02 at 07:04 By Help Net Security 99% of email threats reaching corporate user inboxes in 2024 were response-based social engineering attacks or contained phishing links, according to Fortra. Only 1% of malicious emails that reached user inboxes delivered malware. This shows that while common

Only 1% of malicious emails that reach inboxes deliver malware Read More »

170,000 Impacted by Data Breach at Chord Specialty Dental Partners

170,000 Impacted by Data Breach at Chord Specialty Dental Partners 2025-03-31 at 13:19 By Eduard Kovacs An email security incident at Chord Specialty Dental Partners, a US dental service organization, has impacted more than 170,000 people.  The post 170,000 Impacted by Data Breach at Chord Specialty Dental Partners appeared first on SecurityWeek. This article is

170,000 Impacted by Data Breach at Chord Specialty Dental Partners Read More »

Nine out of ten emails are spam

Nine out of ten emails are spam 2025-01-31 at 06:33 By Help Net Security Now, more than ever, users can fall prey to word-perfect AI-created phishing campaigns, subtle BEC messages that sound remarkably like the sender, and highly convincing ploys from trusted vendors with legitimate-looking websites and clean domains, according to VIPRE Security Group. Spam

Nine out of ten emails are spam Read More »

Threat actors are stepping up their tactics to bypass email protections

Threat actors are stepping up their tactics to bypass email protections 2024-11-01 at 06:33 By Help Net Security Although most organizations use emails with built-in security features that filter out suspicious messages, criminals always find a way to bypass these systems. With the development of AI technology, phishing is becoming increasingly difficult to recognize, allowing

Threat actors are stepping up their tactics to bypass email protections Read More »

Critical Zimbra Vulnerability Exploited One Day After PoC Release

Critical Zimbra Vulnerability Exploited One Day After PoC Release 2024-10-02 at 13:31 By Ionut Arghire A critical-severity vulnerability in Zimbra has been exploited in the wild to deploy a web shell on vulnerable servers. The post Critical Zimbra Vulnerability Exploited One Day After PoC Release appeared first on SecurityWeek. This article is an excerpt from

Critical Zimbra Vulnerability Exploited One Day After PoC Release Read More »

Security measures fail to keep up with rising email attacks

Security measures fail to keep up with rising email attacks 2024-09-13 at 07:31 By Help Net Security Organizations must reassess their email security posture as incidents continue to escalate, leading to financial losses. Key findings reveal a significant increase in email attacks, with many successfully bypassing standard security protocols and targeting vulnerable sectors. Business email

Security measures fail to keep up with rising email attacks Read More »

Unlocking the Front Door: Phishing Emails Remain a Top Cyber Threat Despite MFA

Unlocking the Front Door: Phishing Emails Remain a Top Cyber Threat Despite MFA 2024-08-14 at 18:16 By Kevin Townsend SecurityWeek spoke with Mike Britton, CISO at Abnormal Security, to understand what the company has learned about current social engineering and phishing attacks. The post Unlocking the Front Door: Phishing Emails Remain a Top Cyber Threat

Unlocking the Front Door: Phishing Emails Remain a Top Cyber Threat Despite MFA Read More »

Abnormal Security Raises $250 Million at $5.1 Billion Valuation

Abnormal Security Raises $250 Million at $5.1 Billion Valuation 2024-08-06 at 15:16 By Eduard Kovacs Email security firm Abnormal Security has raised $250 million in a Series D funding round at a $5.1 billion valuation.  The post Abnormal Security Raises $250 Million at $5.1 Billion Valuation appeared first on SecurityWeek. This article is an excerpt

Abnormal Security Raises $250 Million at $5.1 Billion Valuation Read More »

Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains

Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains 2024-07-31 at 18:01 By Ionut Arghire Vulnerabilities in hosted email services allow attackers to spoof the identity of senders, bypassing security measures. The post Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Vulnerabilities Enable Attackers to Spoof Emails From 20 Million Domains Read More »

Scroll to Top