Security leaders have good reasons to fear AI-generated attacks

Generative AI is likely behind the increases in both the volume and sophistication of email attacks that organizations have experienced in the past few months, and it’s still early days, according to Abnormal Security. Their leading worry is the … Continue reading Security leaders have good reasons to fear AI-generated attacks

Bracing for AI-enabled ransomware and cyber extortion attacks

AI has been the shiniest thing in tech since at least November 2022, when ChatGPT was made available to the masses and unveiled the transformative potential of large language models for all the world to see. As businesses scramble to take the lead in o… Continue reading Bracing for AI-enabled ransomware and cyber extortion attacks

Microsoft 365 email senders urged to implement SPF, DKIM and DMARC

In the wake of Google’s announcement of new rules for bulk senders, Microsoft is urging Microsoft 365 email senders to implement SPF, DKIM and DMARC email authentication methods. “These Domain Name Service (DNS) email authentication records… Continue reading Microsoft 365 email senders urged to implement SPF, DKIM and DMARC

How can an email forwarding service send email with a "From" from a domain they don’t control, and still pass SPF?

Let’s say:

alice@example.com sends an email to bob@bob.com.

Bob owns the domain bob.com but doesn’t manage an emailing server. Instead he uses an email forwarding service (provided by his registrar / DNS service, for example Cloudflare d… Continue reading How can an email forwarding service send email with a "From" from a domain they don’t control, and still pass SPF?

How can an email forwarding service send email with a "From" from a domain they don’t control, and still pass SPF?

Let’s say:

alice@example.com sends an email to bob@bob.com.

Bob owns the domain bob.com but doesn’t manage an emailing server. Instead he uses an email forwarding service (provided by his registrar / DNS service, for example Cloudflare d… Continue reading How can an email forwarding service send email with a "From" from a domain they don’t control, and still pass SPF?

LLMs lower the barrier for entry into cybercrime

Cybercriminals employ evolving attack methodologies designed to breach traditional perimeter security, including secure email gateways, according to Egress. “Without a doubt chatbots or large language models (LLM) lower the barrier for entry to cybercr… Continue reading LLMs lower the barrier for entry into cybercrime