Email security

Attackers were able to obtain Authy customers' phone numbers and other data via an unauthenticated endpoint, which has since been secured, but there has been no indication of breaches of Twilio's systems and sensitive data.

Impacted entities have been given a link by Microsoft wherein they could review emails affected by the incident, email notifications revealed.

Intrusions by Unfurling Hemlock, which is believed to be of Eastern European origin, commence with the delivery of malicious emails with the 'WEXTRACT.EXE' file.

One-quarter of attacks during the first three months of 2024 involved BEC, most of which were in the finance sector, a report from Arctic Wolf revealed.

Malware sandbox service Any.Run had its employees subjected to a phishing attack suspected to be part of a business email compromise campaign.

Attackers could leverage a pair of medium-severity vulnerabilities in the Mailcow open-source mail server software older than version 2024-04 to facilitate arbitrary code execution, account takeovers, and sensitive data access, reports The Hacker News.

By leveraging AI, teams can end the black hole and more efficiently manage user-reported phishing emails and even explain to users the specifics of their case.

Such a flaw was publicized by a security researcher after the disclosure was dismissed by Microsoft.