Every post we’ve published — newest first.
Tax season may be months away, but criminals who impersonate accounting firms do not follow a seasonal calendar. A new study of public DNS records shows that most small tax practices remain wide open to email spoofing, …
The most convincing phishing pretext of the past year did not claim your account was locked. It asked whether your company could quote on an upcoming project. Fortra’s Intelligence and Research Experts team, known …
There is a particular sting when the security appliance that filters your inbound email is compromised through an inbound email. On October 14, 2026, Cisco published an updated advisory confirming that a critical …
When Microsoft describes a phishing operation as an ecosystem, it is worth paying attention. On October 14, 2026, the company’s Digital Crimes Unit announced the disruption of YAM Store, an underground marketplace …
Phishing emails usually try to look like something the recipient already knows. A campaign described on October 12, 2026 by researchers in coverage from ISMG goes much further: instead of imitating an existing event, the …
Most phishing advice tells recipients to check two things before clicking: who sent the message and which domain the link points to. A campaign described by Kaspersky on October 8, 2026 defeats both checks at once, …
Anyone can put any domain in the From line of an email. Three DNS records decide whether the receiving server believes it. On October 10, 2026, an independent audit published on the DEV Community looked up the email DNS …
On October 9, 2026, KnowBe4 Threat Lab published an analysis of a shift that redefines what a phishing email looks like. Out of 544,000 threat emails the team tracked between June and August 2026, 53,000 were built with …
On October 4, 2026, the Japanese media group Nikkei disclosed two separate compromises of employee email accounts, incidents that read like a controlled demonstration of the hardest problem in email security today. An …
Barracuda Research published a threat spotlight on October 7, 2026 that changes how we should read the phrase “the email was addressed to someone.” Written by threat analyst Guruprasad Kenja, the analysis …
Germany’s Federal Office for Information Security, the BSI, published a joint study with the Association of Technical Inspection Agencies, TUV, on Wednesday, October 7, 2026, and its message is blunt. German …
On October 2, 2026, Microsoft published an advisory for CVE-2026-96940, an elevation of privilege vulnerability in Exchange Server, and followed it with an out-of-band release it calls the September 2026 V2 security …
