Email security

Email attack techniques are evolving quickly, and traditional secure gateways can't keep up. Context-aware, AI-powered email monitoring may be the solution.

Threat actors have exploited cybersecurity firm Mimecast's secure-link rewriting capability to deploy over 40,000 phishing emails mimicking SharePoint and DocuSign worldwide, Cybernews reports.

DocuSign was the most impersonated brand among phishing emails that bypassed secure email gateways.

The Hacker News reports that multiple new tactics have been employed by the advanced persistent threat operation ToddyCat to compromise corporate Outlook emails and Microsoft 365 access tokens.

Microsoft Entra B2B tenant invitations have been exploited by threat actors to facilitate a new Telephone-Oriented Attack Delivery phishing campaign, according to Cybernews.

This phishing operation embeds malicious JavaScript within HTML attachments disguised as legitimate business documents.

More than 90% of phishing intrusions between July and September have been aimed at Microsoft Outlook and Gmail inboxes, with threat actors increasingly weaponizing trusted platforms to facilitate compromise, according to GBHackers News.

AI was the constant background hum at the OWASP Global AppSec conference last week, but the scene-stealer was a keynote talk telling us that managing risk is pointless.