Info Security Magazine
4 years, 2 months ago
Data breach Discovered at IKEA Canada impacts 95,000 Customers
Compromised data included customer names, email addresses and phone numbers
Security news aggregator
Latest coverage for Email
Stay secure with the latest email security updates, best practices, and threat alerts to protect your inbox and sensitive information.
8
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Email is a system for exchanging digital messages, typically using mail servers and clients over a network. In security, it includes both the messages and the accounts, servers, domains, and authentication mechanisms that handle them. Email commonly carries phishing links, malicious attachments, and fraudulent requests for payments or credentials; compromised accounts can also be used to impersonate trusted people and conduct further attacks.
Defenses include filtering and malware scanning, phishing-resistant multifactor authentication, careful handling of links and attachments, and monitoring for unusual login or sending activity. Domain controls such as SPF, DKIM, and DMARC help receiving systems detect messages that are forged or sent without authorization, while encryption protects message contents in transit or at rest when correctly implemented. Security teams should preserve relevant headers and mailbox activity so suspicious messages can be investigated, removed, and used to identify affected accounts and other recipients.
Showing 8 most recent headlines
Filtered view
Info Security Magazine
4 years, 2 months ago
FBI: Thailand and Hong Kong Banks Used Most in BEC
Email compromise could be a $43bn problem
The Register
4 years, 2 months ago
Phishing operation hits NHS email accounts to harvest Microsoft credentials
You've won $2m! Now just send me a small fee A phishing operation compromised over one hundred UK National Health Service (NHS) employees' Microsoft Exchange email accounts for credential harvesting purposes, according to email security shop Inky.…
Bleeping Computer
4 years, 2 months ago
Attackers hijack UK NHS email accounts to steal Microsoft logins
For about half a year, work email accounts belonging to over 100 employees of the National Health System (NHS) in the U.K. were used in several phishing campaigns, some aiming to steal Microsoft logins. [...]
Bleeping Computer
4 years, 2 months ago
FBI says business email compromise is a $43 billion scam
The Federal Bureau of Investigation (FBI) said today that the amount of money lost to business email compromise (BEC) scams continues to grow each year, with a 65% increase in the identified global exposed losses between July 2019 and December 2021. [...]
The Hacker News
4 years, 2 months ago
New Hacker Group Pursuing Corporate Employees Focused on Mergers and Acquisitions
A newly discovered suspected espionage threat actor has been targeting employees focusing on mergers and acquisitions as well as large corporate transactions to facilitate bulk email collection from victim environments
Bleeping Computer
4 years, 2 months ago
Google SMTP relay service abused for sending phishing emails
Phishing actors abuse Google's SMTP relay service to bypass email security products and successfully deliver malicious emails to targeted users. [...]
The Hacker News
4 years, 2 months ago
Chinese "Override Panda" Hackers Resurface With New Espionage Attacks
A Chinese state-sponsored espionage group known as Override Panda has resurfaced in recent weeks with a new phishing attack with the goal of stealing sensitive information