Every post we’ve published — newest first.
A phishing campaign documented by security researchers in June 2026 has drawn attention not because it breaks email authentication, but because it does not need to. The CodeStorm phishing kit – a commercial-grade …
The EasyDMARC 2026 DMARC Adoption Report, drawn from an analysis of the top 1.8 million global domains, contains a finding that deserves more attention than it has received: more than 70 percent of DMARC-enabled domains …
On June 17, 2026, the Barracuda Networks security red team published a simulation that traced an AI-powered email attack from the first phishing message to full endpoint compromise and persistent attacker access. The …
In February 2024, Google and Yahoo told bulk senders that one-click unsubscribe was no longer optional. Most senders treated it as a Google-and-Yahoo problem and updated their templates accordingly – or believed …
On June 2, 2026, SANS Internet Storm Center handler Xavier Mertens published an analysis of a phishing wave that had been landing in his inbox for several consecutive days. The attachment on each message was an SVG file …
For years, Google Postmaster Tools gave senders a reputation label – High, Medium, Low, or Bad – and left them to figure out what was causing the problem. The labels were opaque by design. You could watch …
In early June 2026, Swiss cybersecurity firm InfoGuard Labs disclosed a vulnerability they named Ghost-Sender: a misconfiguration in Microsoft Exchange Online that allows an attacker to deliver email impersonating any …
The Anti-Phishing Working Group published its Q1 2026 Phishing Activity Trends Report in May 2026. The headline number is significant: 971,181 unique phishing attacks in the first three months of the year, up 13.8 …
On June 12, 2026, Google filed a civil lawsuit against a China-based cybercrime network known as Outsider Enterprise. The complaint alleges that the group used Google’s own Gemini AI to generate phishing landing …
Abnormal AI’s 2026 Attack Landscape Report, published in April, analyzed nearly 800,000 email attacks across more than 4,600 organizations during the second half of 2025. One finding in particular is worth pausing …
The fine arrived in March 2026, and for many email marketing teams it landed with the quiet weight of a case study they already recognized. Lululemon Athletica Australia paid A$702,900 to Australia’s communications …
A message arrives. The sender domain looks legitimate. The receiving mail server checks SPF: pass. It verifies the DKIM signature: pass. It evaluates the DMARC record against both results: pass. Every authentication gate …
