Collaborate Disseminate
In March of 2011, security vendor RSA was the target of an attack that compromised sensitive data related to the company’s flagship SecureID product. The solution was in-use by thousands of high-profile clients around the world, including the U.S…. Continue reading Malicious Life Podcast: The Untold Story of the RSA Breach Part 1
A new security testing tool that enables email messages to be faked or spoofed, even if the recipients are protected by best practices, has garnered some strong criticism from email security advocates. News of the tool — called Mailsploit — took off last week after a Wired article highlighted the research. The tool would give would-be attackers a way around email security standards — known as DMARC — employed by a number of email clients. DMARC is the industry standard that prevents email spoofing, a practice where hackers messages appear to come from trusted correspondents. John Wilson, the field CTO for email security company Agari, told CyberScoop that while the article did contain caveats, he considered it “rather alarmist.” “If you just skim that article, you would come away with the impression that this standard, which the email industry has worked on for a decade and which has stopped remarkable […]
The post Is Mailsploit really a threat to DMARC? appeared first on Cyberscoop.