Email security

Microsoft President Brad Smith stood up for his company over its handling of an attack by a Chinese threat actor in 2023.

Hackread reports that organizations in the IT and technology industry were most spoofed in phishing scams between January 2020 and March 2024, followed by those in the banking and financial services sector.

U.S. federal agencies recorded 32,211 cyber incidents in 2023, representing a 9.9% increase over 2022, most of which involved violations of system usage policies, The Register reports.

Officials at Arlington, Massachusetts, confirmed the loss of more than $445,000 following a business email compromise attack against the town last year, reports StateScoop.Officials at Arlington, Massachusetts, confirmed the loss of more than $445,000 following a business email compromise attack against the town last year, reports StateScoop.

Threat actors have launched a new phishing campaign targeting Spanish-speaking individuals with an updated Agent Tesla malware variant, Hackread reports.

Widely known artificial intelligence email assistant EmailGPT was discovered by researchers from Synopsys' Cybersecurity Research Center to be impacted by a medium-severity prompt injection vulnerability, which could be exploited to enable data exposure, financial loss, and denial-of-service attacks, according to Hackread.

Canadian province British Columbia had 22 government email inboxes compromised following a suspected state-sponsored cyberattack that commenced in April, which exposed information from nearly 20 individuals, reports The Record, a news site by cybersecurity firm Recorded Future.

Data breach notification service Have I Been Pwned has been updated to include 361 million email addresses from credentials exfiltrated in credential-stuffing attacks and password-stealing malware intrusions that have been leaked on Telegram channels used by cybercriminals, BleepingComputer reports.