Email security

Avalon Healthcare settled with state regulators after its 2019 email hack due to failing to timely report, while Scripps Health will pay $3.5 million after its 2021 data theft tied to ransomware.

The offering reflects an ongoing evolution in identity security to focus more on the individual user, versus the endpoint.

As part of our Year in Review series, we examine how the expanded attack surface effected email and device security efforts, leaving organizations vulnerable to phishing and ransomware.

Numerous Comcast Xfinity email accounts have been hacked in a massive two-factor authentication bypass campaign, with the compromised accounts leveraged for resetting the passwords for other services, reports BleepingComputer.

Predictions five years ago of the demise of email were greatly exaggerated.

Threat actors affiliated with the Play ransomware strain are leveraging a never-before-seen exploit method that bypasses Microsoft's ProxyNotShell URL rewrite mitigation to gain remote code execution through Outlook Web Access (OWA).  

U.S. consumers continue to lag in identifying and defending against cybersecurity threats even though the average prevalence of connected devices per household has risen by 25% between 2020 and 2022, according to TechRepublic.

Armorblox uses natural language understanding to thwart attack on large educational institution that used social engineering to bypass Office 365 security.