Every post we’ve published — newest first.
Researchers at Check Point have documented a phishing campaign that skips the part security teams spend the most time training people to spot. Running from late June through the second week of July, the campaign sent …
Hardware wallet maker Coldcard is dealing with two incidents at once, and the second one is feeding on the first. Attackers first exploited a random-number-generation flaw across several Coldcard models and firmware …
Researchers at email security company ZeroBEC have documented a campaign built on the Greatness phishing-as-a-service platform that spoofs RingCentral, the business communications provider, using fake voicemail and …
HubSpot’s Contact Discovery feature formally launches today, August 4, 2026, letting customers find, verify, and add new contacts inside their CRM by drawing on a shared enrichment dataset built from business …
Help Net Security published a video interview on August 3, 2026 featuring Mike Boyle, VP of Business Units at GMO GlobalSign, and Rahul Powar, CEO and founder of Red Sift, walking through the history of email security …
Costco has agreed to pay $14 million to resolve a class action lawsuit in King County Superior Court accusing the retailer of sending promotional emails with subject lines that were not true when they were sent. The …
Today is the day California’s Delete Act stops being a compliance deadline on a calendar and starts being an enforcement reality. As of August 1, 2026, every one of the more than 600 data brokers registered with …
Japanese telecom operator KDDI confirmed that attackers had exploited a zero-day vulnerability in third-party software to break into a shared email platform it runs for internet service providers. The intrusion happened …
Infobip announced on July 9, 2026 that it had acquired SocketLabs, a Pennsylvania-based email infrastructure company that processes more than 1.2 billion messages a month for over 2,000 businesses. On its face this is a …
Huntress published research on July 7, 2026 detailing a phishing campaign that ran undisturbed for roughly eight months by exploiting something no authentication protocol was ever built to catch: a real feature, working …
Researchers tracking a campaign now called Operation BlueDash have documented a phishing operation that skips the part most email defenses are built to catch. There is no lookalike domain to flag, no spoofed sender to …
Tim Draegen is one of the original authors of the DMARC specification and the founder of dmarcian, Inc., a company built to help other organizations monitor and enforce the very standard he helped write. On July 10, …
