Every post we’ve published — newest first.
Between June 12 and June 26, an automated attacker made more than 81 million login attempts against Microsoft 365 accounts monitored by the security firm Huntress. The traffic came from IPv6 address space registered to …
The FBI’s Internet Crime Complaint Center (IC3) released its 2025 Internet Crime Report in April, marking 25 years of tracking reported cybercrime in the United States. The topline number is stark on its own: …
On June 25, 2026, Microsoft’s threat intelligence team published details of a phishing campaign that has been running against hotels across Europe and Asia since April. The lure is ordinary: a ZIP file named …
Tomorrow, June 30, 2026, Essential Entities across the European Union face the first formal compliance audit under the Network and Information Security Directive 2. If your organization operates in energy, transport, …
DMARC has earned its place as the cornerstone of domain-level email authentication. Set your policy to p=reject, align your SPF and DKIM records correctly, and the vast majority of external spoofing attempts that abuse …
A vulnerability disclosed in June 2026 in the Gravity SMTP WordPress plugin illustrates a category of email security failure that DMARC was never designed to address. CVE-2026-4020 is an unauthenticated information …
Google published its June 2026 fraud and scams advisory this month, drawing on data from the NASDAQ Global Financial Crime Report and its own threat intelligence teams. The headline numbers are significant: global fraud …
A phishing campaign documented by security researchers in June 2026 has drawn attention not because it breaks email authentication, but because it does not need to. The CodeStorm phishing kit – a commercial-grade …
The EasyDMARC 2026 DMARC Adoption Report, drawn from an analysis of the top 1.8 million global domains, contains a finding that deserves more attention than it has received: more than 70 percent of DMARC-enabled domains …
On June 17, 2026, the Barracuda Networks security red team published a simulation that traced an AI-powered email attack from the first phishing message to full endpoint compromise and persistent attacker access. The …
In February 2024, Google and Yahoo told bulk senders that one-click unsubscribe was no longer optional. Most senders treated it as a Google-and-Yahoo problem and updated their templates accordingly – or believed …
On June 2, 2026, SANS Internet Storm Center handler Xavier Mertens published an analysis of a phishing wave that had been landing in his inbox for several consecutive days. The attachment on each message was an SVG file …
