Email security

Play ransomware gang behind Rackspace attack Texas Public Radio reports that the Play ransomware gang has been noted by Rackspace to be the perpetrators of an attack against its Hosted Exchange platform in early December.

Avalon Healthcare settled with state regulators after its 2019 email hack due to failing to timely report, while Scripps Health will pay $3.5 million after its 2021 data theft tied to ransomware.

The offering reflects an ongoing evolution in identity security to focus more on the individual user, versus the endpoint.

As part of our Year in Review series, we examine how the expanded attack surface effected email and device security efforts, leaving organizations vulnerable to phishing and ransomware.

Numerous Comcast Xfinity email accounts have been hacked in a massive two-factor authentication bypass campaign, with the compromised accounts leveraged for resetting the passwords for other services, reports BleepingComputer.

Predictions five years ago of the demise of email were greatly exaggerated.

Threat actors affiliated with the Play ransomware strain are leveraging a never-before-seen exploit method that bypasses Microsoft's ProxyNotShell URL rewrite mitigation to gain remote code execution through Outlook Web Access (OWA).