Every post we’ve published — newest first.
For years, Google Postmaster Tools gave senders a reputation label – High, Medium, Low, or Bad – and left them to figure out what was causing the problem. The labels were opaque by design. You could watch …
In early June 2026, Swiss cybersecurity firm InfoGuard Labs disclosed a vulnerability they named Ghost-Sender: a misconfiguration in Microsoft Exchange Online that allows an attacker to deliver email impersonating any …
The Anti-Phishing Working Group published its Q1 2026 Phishing Activity Trends Report in May 2026. The headline number is significant: 971,181 unique phishing attacks in the first three months of the year, up 13.8 …
On June 12, 2026, Google filed a civil lawsuit against a China-based cybercrime network known as Outsider Enterprise. The complaint alleges that the group used Google’s own Gemini AI to generate phishing landing …
Abnormal AI’s 2026 Attack Landscape Report, published in April, analyzed nearly 800,000 email attacks across more than 4,600 organizations during the second half of 2025. One finding in particular is worth pausing …
The fine arrived in March 2026, and for many email marketing teams it landed with the quiet weight of a case study they already recognized. Lululemon Athletica Australia paid A$702,900 to Australia’s communications …
A message arrives. The sender domain looks legitimate. The receiving mail server checks SPF: pass. It verifies the DKIM signature: pass. It evaluates the DMARC record against both results: pass. Every authentication gate …
A DMARC record is not the same as DMARC protection. That distinction has been clear to anyone who works in email authentication for years, but EasyDMARC’s 2026 DMARC Adoption and Enforcement Report, drawn from an …
When DMARC enforcement was weak, the easiest path into an organization’s finances ran through email. A spoofed message from “[email protected]” landed in the inbox, the employee wired the money, and the …
Having a DMARC record and actually using it to stop spoofed email are, it turns out, very different things. Valimail’s 2026 State of DMARC Report documents that gap with unusual precision: DMARC awareness – …
A phishing campaign uncovered by Varonis Threat Labs targeted more than 70 organizations – predominantly in the United States – by exploiting a legitimate Microsoft 365 feature in a way most security teams …
Peak summer travel season is underway. Hundreds of millions of travelers will book flights, check confirmations, respond to upgrade offers, and receive baggage notifications over the coming weeks. Every one of those …
