Collaborate Disseminate
Please bear with me, I’m definitely not an expert here, and this is one case where Google, Bing, and their many AIs are not getting me a useful answer…
TL;DR? I’m looking for information on how to embed a logotype on a X.509 PEM certific… Continue reading Trying to set up a crude prototype system to test BIMI using open-source tools
I created an online account and received the usual welcome email. In addition, however, an "Undelivered Mail Returned to Sender" email appeared in my inbox one second later. I am the supposed sender, and the website I registered … Continue reading "Undelivered Mail" I never sent (after registration on website)
My relative received an email from a bill they were expecting to pay. So they paid said bill.
Only problem is: it was a spoofed email, and the real bill only came in later.
I checked the email on the email platform (Outlook) and there was … Continue reading Spoofed email: whose fault is it?
CSC released its third annual Domain Security Report that found three out of four Forbes Global 2000 companies have not adopted key domain security measures—exposing them to high risk of security threats. These companies have implemented less than half… Continue reading Many Global 2000 companies lack proper domain security
I’ve recently started configuringn and using DMARC reports and I have the following question. How can the DKIM domain not be my domain (and pass)?
I have the following report
<record>
<row>
<source_ip>185.53.XXX.XX… Continue reading DKIM from another domain, how does it work?
I am trying to get the DKIM and SPF settings correct for a client who uses both GSuite and WordPress to send her emails.
I added this dmarc: v=DMARC1; p=none; rua=mailto:l***@******ney.com; fo=1; adkim=r; aspf=r;
(when I set the p to quara… Continue reading DKIM/SPF What does it mean when policy_evaluated fails but auth_results passes?
IP addresses can be spoofed. The Envelope-From and Header-From addresses can be spoofed as well. But is it possible to spoof all three at the same time to send a forged email that passes both SPF and SPF alignment in DMARC?
If it is possib… Continue reading Can DMARC’s SPF alignment be spoofed?
Proofpoint released new research which found that the top universities in the United States, the United Kingdom and Australia are lagging on basic cybersecurity measures, subjecting students, staff and stakeholders to higher risks of email-based impers… Continue reading Universities are at risk of email-based impersonation attacks
I have set up DMARC for some months now and I am using dmarc-visualizer to parse the reports.
Overall I am happy so we can advance towards BIMI, but before switching to quarantine or reject on DMARC, there is a behavior that I cannot under… Continue reading DMARC falsely reports impersonation
Phishers are exploiting a flaw in Google’s SMTP relay service to send malicious emails spoofing popular brands. Avanan researcher Jeremy Fuchs says that starting in April 2022, they have seen a massive uptick of these SMTP relay service exploit attacks… Continue reading Phishers exploit Google’s SMTP Relay service to deliver spoofed emails