SecurityNewHidden HTML Hijacks AI Email Summarizers
Forcepoint shows invisible text can silently change what an AI assistant reads in your email.
> Search
15 results for “email”
SecurityNew
SecurityZimbra attacks breach 270+ servers
Threat actors compromised over 270 Zimbra instances in ongoing RCE attacks, prompting CISA to order urgent patching.
SecurityFramework data breach exposes customer details
A zero-day in Metabase exposed Framework customer names, emails, and addresses; payment data was safe.
Cyber CrimeIEH breach exposes defense supplier risks
IEH Corporation disclosed a phishing attack compromising employee emails, potentially exposing sensitive defense-related data.
Cyber CrimeRingCentral Spoof Hijacks M365 Accounts
Phishing service Greatness uses spoofed RingCentral emails to bypass MFA and compromise Microsoft 365 accounts.
SecurityAuth.js Email Normalizer Bypass Flaw
A critical vulnerability in Auth.js and NextAuth allows attackers to intercept magic-link sign-in flows by exploiting improper Unicode normalization.
SecurityBudibase OIDC SSO Flaw Allows Account Takeover
A critical vulnerability in Budibase allows attackers to hijack existing user accounts by exploiting improper email validation in the OIDC login process.
SecurityAI Spam Filters Falter Against Salting
Modern LLM-powered email security is struggling to identify phishing attempts that use decades-old text-hiding techniques.
SecurityHCL Aftermarket EPC Flaw Risks Data Loss
A critical business logic vulnerability in HCL Aftermarket EPC allows unauthorized users to intercept passwords via email redirection.
SecurityGovernment Domains Weaponized by Malware
Researchers have discovered a campaign using hijacked Brazilian government websites and authenticated emails to distribute malware.
SecurityMaternity Data Exposure At NHS Trust
NHS Forth Valley faces an investigation after an employee transferred sensitive maternity patient records to a personal email account.
Cyber CrimeTravel Sector Under Siege as TA558 Pivots Toward Stealthy Payloads
Threat actors are weaponizing reservation-themed emails with container files to bypass modern Microsoft Office security protections.
SecurityThe Silent Sabotage: How MemGhost Alters AI Agent Memories
A new automated attack technique can plant persistent, invisible false memories into AI agents through a single, malicious email.
SecurityZimbra Security Breach Exposes Critical Zero-Click Email Risks
A severe vulnerability in the Classic Web Client requires immediate patching to prevent unauthorized code execution via email.
SecurityThe Hidden Danger Lurking in Zimbra's Classic Web Client
A persistent cross-site scripting flaw in Zimbra's classic client underscores the relentless exploitation of enterprise email platforms.