Every post we’ve published — newest first.
Your DMARC is at p=reject. Your SPF is clean. Every outbound message carries a valid DKIM signature. By every measure the industry has defined, your domain’s authentication stack is complete. And yet there is a …
The enforcement wave worked – partially. When Google, Yahoo, and Microsoft rolled out hard authentication requirements between 2024 and 2025, the goal was to flush unauthenticated bulk mail from the ecosystem. That …
On May 14, 2026, Microsoft disclosed CVE-2026-42897, a spoofing vulnerability in on-premises Exchange Server affecting Outlook Web Access. Within 24 hours, CISA added it to the Known Exploited Vulnerabilities catalog. …
Every email marketer already knows the GDPR story. A regulation passed in Brussels rewrote how the world collects and uses personal data, and companies that dismissed it as a European problem paid the price when …
Data from Valimail’s 2026 State of DMARC Report establishes higher education as the worst-performing sector for DMARC enforcement of any industry category measured. Universities, colleges, and schools sit at just …
Nine days before the FIFA World Cup 2026 kicks off across the United States, Canada, and Mexico, a Proofpoint analysis has found that more than one-third of the tournament’s official partners do not have the email …
A new report from Paubox makes the connection between weak email authentication and real-world healthcare breaches impossible to ignore: of 170 email-related breaches at healthcare organizations analyzed across all of …
On April 22, 2026, the IETF DMARC working group published draft-ietf-dmarc-arc-to-historic-00, calling for RFC 8617 to be reclassified as a Historic standard. The working group had been rechartered less than a week …
Every organization that has grown its software stack over the past few years carries a potential deliverability fault line inside a DNS record most people never look at. The SPF record, a short TXT entry that authorizes …
BIMI sits one layer above DMARC. It is the protocol that takes the trust you have built by getting to p=quarantine or p=reject, and turns it into your logo appearing next to your messages in the inbox. Gmail rolled out …
Microsoft Threat Intelligence published its Q1 2026 Email Threat Landscape Report in late April, and the headline figure is difficult to absorb: 8.3 billion email-based phishing threats detected in the first three months …
A single-month scan of 3.1 billion emails. One in three messages flagged as malicious or unwanted spam. Nearly half of all malicious activity originating from phishing. These are the headline numbers from …
