Every post we’ve published — newest first.
A DMARC record is not the same as DMARC protection. That distinction has been clear to anyone who works in email authentication for years, but EasyDMARC’s 2026 DMARC Adoption and Enforcement Report, drawn from an …
When DMARC enforcement was weak, the easiest path into an organization’s finances ran through email. A spoofed message from “[email protected]” landed in the inbox, the employee wired the money, and the …
Having a DMARC record and actually using it to stop spoofed email are, it turns out, very different things. Valimail’s 2026 State of DMARC Report documents that gap with unusual precision: DMARC awareness – …
A phishing campaign uncovered by Varonis Threat Labs targeted more than 70 organizations – predominantly in the United States – by exploiting a legitimate Microsoft 365 feature in a way most security teams …
Peak summer travel season is underway. Hundreds of millions of travelers will book flights, check confirmations, respond to upgrade offers, and receive baggage notifications over the coming weeks. Every one of those …
Your DMARC is at p=reject. Your SPF is clean. Every outbound message carries a valid DKIM signature. By every measure the industry has defined, your domain’s authentication stack is complete. And yet there is a …
The enforcement wave worked – partially. When Google, Yahoo, and Microsoft rolled out hard authentication requirements between 2024 and 2025, the goal was to flush unauthenticated bulk mail from the ecosystem. That …
On May 14, 2026, Microsoft disclosed CVE-2026-42897, a spoofing vulnerability in on-premises Exchange Server affecting Outlook Web Access. Within 24 hours, CISA added it to the Known Exploited Vulnerabilities catalog. …
Every email marketer already knows the GDPR story. A regulation passed in Brussels rewrote how the world collects and uses personal data, and companies that dismissed it as a European problem paid the price when …
Data from Valimail’s 2026 State of DMARC Report establishes higher education as the worst-performing sector for DMARC enforcement of any industry category measured. Universities, colleges, and schools sit at just …
Nine days before the FIFA World Cup 2026 kicks off across the United States, Canada, and Mexico, a Proofpoint analysis has found that more than one-third of the tournament’s official partners do not have the email …
A new report from Paubox makes the connection between weak email authentication and real-world healthcare breaches impossible to ignore: of 170 email-related breaches at healthcare organizations analyzed across all of …
