Cyber CrimeBackdoors Hide Behind Email Security Brands
Rapid7 says Linux implants in South Korea and Taiwan impersonate SpamSniper and ShareTech to slip past defenders.
> Search
12 results for “email security”
Cyber Crime
SecurityOutlook Adds Two More Blocked File Types
Microsoft will block .msix and .msixbundle attachments in New Outlook for Windows and Outlook on the Web starting in November 2026.
SecurityExchange Flaw Opens Mailboxes to Insiders
Microsoft pushed out-of-band fixes for CVE-2026-96940, a high-severity Exchange Server authorization flaw rated 8.8.
Cyber CrimeZimbra Bug Exploited for Mailbox Theft
Microsoft says attackers chained a patched Zimbra command-injection flaw into web shells, credential theft and cloud exfiltration.
Cyber CrimeCisco Email Gateway Flaw Under Attack
Cisco warns CVE-2026-76461, a CVSS 9.8 flaw in Secure Email Gateway, is being exploited to run commands as root, with a federal patch deadline of September 17.
Cyber CrimeKnowBe4 Flags M365 Direct Send Phishing
A KnowBe4 report details a phishing campaign that abused Microsoft 365's Direct Send feature, with volume following US Eastern business hours.
Cyber CrimeTrezor Brevo Breach Exposes 347,000 Emails
Trezor says phishing after a Brevo email provider breach hit 347,000 addresses and 2,500 users who clicked a malicious link.
Cyber CrimeUnicode Trick Fuels Million-Email Phishing Surge
A campaign hides 'funding' lure words with invisible Unicode tags, splitting keywords to slip past filters.
SecuritySVG Smuggling Drives Two-Month Voicemail Phishing Wave
Emails disguised as voicemail used SVG files to hide JavaScript, bypassing native filters in thousands of orgs.
SecurityZimbra attacks breach 270+ servers
Threat actors compromised over 270 Zimbra instances in ongoing RCE attacks, prompting CISA to order urgent patching.
SecurityAI Spam Filters Falter Against Salting
Modern LLM-powered email security is struggling to identify phishing attempts that use decades-old text-hiding techniques.
SecurityThe Hidden Danger Lurking in Zimbra's Classic Web Client
A persistent cross-site scripting flaw in Zimbra's classic client underscores the relentless exploitation of enterprise email platforms.