al iverson
The scary new twist on an old email scam
Uh oh. You got an email. Possibly "from" your own email address. The bad guy sending the email says they're targeting YOU and ...
Topic
email security
cybernews
Should you delete your old emails?
Niamh Ancell, writing for Cybernews , asked me an interesting question recently. The question was: Should you delete your old emails? Is it ...
email security
Mailgun: A word of caution for Laravel developers
Hey, nerds! Do you use the Laravel php framework when developing web applications? Do you also use Mailgun to send email from said applicati...
authentication
North Korea targeting weak DMARC policies
Bleeping Computer’s Sergiu Gatlan reports on a dire DMARC warning from the US National Security Agency (NSA): It seems that North Korea love...
authentication
Learning about the SubdoMailing Exploit
Multiple folks have shared this along lately and though I’ve mentioned it in passing in a prior post , I thought it would be good to pull to...
email forwarding
Oof; exploitable loopholes in email forwarding
The Register's Thomas Claburn details a recently shared research paper exposing troubling examples of loopholes in email authentication ...
dkim
DKIM replay attacks and what to do about them
DKIM replay attacks are one of the new big things lately, and they work like this: Take a DKIM signed email message, and re-send it to a bil...
email security
Rackspace Hosted Exchange email service hit by ransomware attack
Rackspace appears to have suffered a security issue related to their Hosted Exchange mailbox environment, starting on December 2nd. You can ...
aliases
Brian Krebs on Email Aliases
It's always good to take a look at email functionality through a security lens. Head on over to Krebs on Security to check out " T...
cloudflare
Cloudflare plans to eat Proofpoint's lunch?
Here's one I almost missed, from a couple of weeks ago: According to Wired, Cloudflare is moving into the email security space . The goa...
2fa
Google will automatically enroll users in two-factor authentication soon
PCWorld's Mark Hachman explains Google's plans to automatically enroll new users into multi-factor authentication to better protect...
email security
The Current State of TLS over SMTP?
Michael Adkins, Mail Integrity Engineer at Facebook summarizes it thusly : "STARTTLS encryption is widely supported and has achieved cr...