Daily DMARC News
  • Home
  • Posts
  • Excello Mail ↗
  • EN
  • ES
  • PT

All Posts

Every post we’ve published — newest first.

News on this site is aggregated and summarized automatically from public industry sources. Occasional inaccuracies are possible and always unintentional — if you spot one, we’ll gladly correct or remove it. Report an issue.

  • August 13, 2026 5 min read

    One Compromised Inbox Plus Microsoft Copilot Equaled a $247,500 Wire Fraud. DMARC Was Never in the Room.

    Barracuda’s Red Team published research on August 4, 2026, ahead of Black Hat USA 2026, that should reframe how security teams think about the AI assistants now built into every major mailbox. Their controlled …

  • August 12, 2026 5 min read

    9,394 Phishing Emails Came Straight From Google's Own Servers. DMARC Passed on Every One.

    Check Point’s Harmony Email research team disclosed a phishing campaign built on a premise that should worry anyone who treats authentication as proof of safety: the messages were not spoofed at all. They were sent …

  • August 11, 2026 6 min read

    A Real Invoice Email From a Real Compromised Mailbox Is Now How Banking Malware Gets Installed. DMARC Passes Every Time.

    Gen Digital, the company behind Norton and Avast, published its H1 2026 Threat Report this month, and buried inside it is an attack chain that deserves more attention than a single line item. Researchers documented a …

  • August 10, 2026 5 min read

    CSS Alone Can Now Steal a Password Inside Gmail, Outlook, and Yahoo Mail. No JavaScript, No Link, and DMARC Never Sees It.

    At Black Hat USA 2026, PortSwigger researcher Gareth Heyes presented a talk called “CSS: the bomb inside your inbox,” and the finding underneath the title is a genuinely uncomfortable one for anyone who …

  • August 9, 2026 6 min read

    43% of BEC Emails Now Just Ask for Your Phone Number. Once You Reply, DMARC Is Out of the Conversation.

    LevelBlue’s SpiderLabs threat research team, the group formerly under AT&T Cybersecurity, closed out its review of 2025 business email compromise activity with a number that should reframe how most security …

  • August 8, 2026 5 min read

    Payroll Pirates Now Route Phishing Through Google Meet and AWS S3. The Session ID Outlives the IP Address.

    Arctic Wolf researchers are tracking a widespread, email-driven phishing campaign that shares clear tactical overlap with Storm-2755, the cluster Microsoft first named “Payroll Pirate” in April after it …

  • August 7, 2026 5 min read

    The Sign-In Page Was Genuinely Microsoft's Own. DMARC Had Nothing Left to Check.

    Researchers at Check Point have documented a phishing campaign that skips the part security teams spend the most time training people to spot. Running from late June through the second week of July, the campaign sent …

  • August 6, 2026 5 min read

    A Real $88 Million Theft Became the Lure. The Phishing Email Came From a Domain DMARC Was Never Asked to Protect.

    Hardware wallet maker Coldcard is dealing with two incidents at once, and the second one is feeding on the first. Attackers first exploited a random-number-generation flaw across several Coldcard models and firmware …

  • August 5, 2026 4 min read

    The Email Failed SPF, DKIM, and DMARC. It Reached the Inbox Anyway, Because RingCentral Was on the Safe Sender List.

    Researchers at email security company ZeroBEC have documented a campaign built on the Greatness phishing-as-a-service platform that spoofs RingCentral, the business communications provider, using fake voicemail and …

  • August 4, 2026 5 min read

    HubSpot Wanted to Pool Your Email Engagement Data by Default. Contact Discovery Launches Today Anyway, Just Opt-In This Time.

    HubSpot’s Contact Discovery feature formally launches today, August 4, 2026, letting customers find, verify, and add new contacts inside their CRM by drawing on a shared enrichment dataset built from business …

  • August 3, 2026 5 min read

    AI Cut Phishing Email Creation From Hours to Seconds. DMARC and BIMI Are the Trust Signal Left Standing.

    Help Net Security published a video interview on August 3, 2026 featuring Mike Boyle, VP of Business Units at GMO GlobalSign, and Rahul Powar, CEO and founder of Red Sift, walking through the history of email security …

  • August 2, 2026 5 min read

    $14 Million for 'Today Is the Last Day': Costco's Settlement Is the Largest CEMA Payout Yet

    Costco has agreed to pay $14 million to resolve a class action lawsuit in King County Superior Court accusing the retailer of sending promotional emails with subject lines that were not true when they were sent. The …

  • ««
  • «
  • 5
  • 6
  • 7
  • 8
  • 9
  • »
  • »»
Daily DMARC News

Daily news, analysis, and guidance on DMARC and email security.

Explore

  • Home
  • All posts
  • RSS feed

From the team

  • Excello Mail ↗
  • About
  • Contact
© 2026 Daily DMARC News. All rights reserved. From the team at Excello Mail.