Email security

The incident, disclosed in a regulatory filing, involved a business email compromise attack where cybercriminals likely infiltrated email or accounting systems to alter payment details.

The attack chain begins with a user receiving an email containing a URL that downloads an encoded .cmd file.

Attacks on email that exploit OAuth consent, lateral phishing, and AI payroll fraud top the list.

How API-based security is redefining email protection in the face of escalating human risk.

The campaign leverages a newly-discovered phishing kit called VENOM.

Craig Sanderson dives into the newly finalized NIST SP 800-81 as it marks a pivotal shift in DNS security.

Ukrainian government entities, healthcare providers, financial providers, security firms, educational institutions, and software development companies have been targeted with a phishing campaign spoofing the country's Computer Emergency Response Team to facilitate the deployment of the AGEWHEEZE RAT between Mar. 26 and 27, reports The Cyber Express.

More than a decade since DMARC became available, many organizations still don't use it. Here's why you can no longer wait.