exploits
SmarterMail exploit: upgrade now!
SmarterMail is an email/collaboration suite of tools positioned as a Microsoft Exchange alternative, offering native MAPI support, supposed...
Topic
exploits
best practices
OpenDKIM on Debian: Skip that L= tag
A reader on the Mailop list pointed out that the Debian Linux wiki has a page for OpenDKIM and that this page can be interpreted as offeri...
authentication
DKIM L=Tag Exploit, two months later: Status and data
Last week on the Valimail blog, I shared a status update on the DKIM L= tag vulnerability that allowed bad guys to repurpose signed email m...
authentication
Be aware: DKIM L=Tag Exploit
On Friday, May 17, 2024, security researchers from ZONE published details of a vulnerability inherent to the DomainKeys Identified Mail (DK...
authentication
Learning about the SubdoMailing Exploit
Multiple folks have shared this along lately and though I’ve mentioned it in passing in a prior post , I thought it would be good to pull to...
bimi
Gmail puts BIMI on pause while addressing exploit
Google seems to have put Gmail's BIMI logo checking (and the new blue checkmark ) on hold temporarily starting perhaps on Monday, June ...
exploits
Forged FBI spam and Formmail Exploits
Back in November, Spamhaus reported on how somebody managed to send a bunch of forged email through real FBI email servers . Brian Krebs bro...
clamav
Using ClamAV? Update Now
ClamAV is a popular open source anti-virus engine, that among other things, is popularly used to scan emails on Linux/Unix systems for bad ...
carlo catajan
On the Recent Yahoo! Mail Exploit
Over on the ExactTarget blog, Carlo Catajan explains the recently discovered (and since closed) Yahoo! Mail account security issue.