DMARC 2.0? New BIMI standard will help fight spoofing and phishing

Major email service providers are teaming up with large corporations like health insurers, financial service providers and social media giants to develop a new standard that will let commercial email senders securely display their logo next to the “from” name when a message is in a user’s inbox. Brand Indicators for Message Identification, or BIMI, aims to bolster sagging public trust in email, and thereby increase customer engagement with commercial marketing messages. But senders will have to use industry-standard email verification measures in order to leverage BIMI, and the logos will also appear on individual emails from employees of the sending company, as well as mass marketing messages. As a result, BIMI, will also help combat spoofing and phishing messages, according to Patrick Peterson, the founder and executive chairman of email security outfit Agari — one of the new standard’s authors. “We’re putting the trust back into email,” he told […]

The post DMARC 2.0? New BIMI standard will help fight spoofing and phishing appeared first on Cyberscoop.

Continue reading DMARC 2.0? New BIMI standard will help fight spoofing and phishing

Fooling Face Recognition with Infrared Light

Yet another development in the arms race between facial recognition systems and facial-recognition-system foolers. BoingBoing post….
The post Fooling Face Recognition with Infrared Light appeared first on Security Boulevard.
Continue reading Fooling Face Recognition with Infrared Light

Tax prep tools lag in DMARC implementation, advocacy group says

With tax season underway, a cybersecurity advocacy group is warning that vendors of popular tax preparation tools may be unprepared to protect users from phishing scams. Four out of the eight most popular tax preparation software products don’t employ basic protections against email spoofing, according to testing by the cybersecurity nonprofit Global Cyber Alliance. GCA tested the domains of the popular programs to check what settings they employ under the Domain-based Message Authentication, Reporting and Conformance (DMARC) protocol. DMARC is an industry standard designed to detect and prevent email spoofing. GCA’s findings, released last week, are as follows: Reject: Liberty Tax Quarantine: Credit Karma, Jackson Hewitt and Tax Slayer None: Free Tax USA and Turbo Tax No policy: H&R Block and TaxAct DMARC has three levels of protection against emails that try to hijack a particular domain. If an organization employs the “reject” policy — the highest setting — a spoofed […]

The post Tax prep tools lag in DMARC implementation, advocacy group says appeared first on Cyberscoop.

Continue reading Tax prep tools lag in DMARC implementation, advocacy group says

Office 365 Takes Aim at Spoofers but Users See Warnings About Fraudulent Messages

Microsoft upgraded their EOP anti-spoofing capabilities inside Office 365, which is good, but they didn’t tell anyone. The first users knew was when they started to receive messages stamped with “the sender failed our fraud detection checks” – something that is never assuring. This only applies to ATP customers, but it’s not the first time Microsoft has failed to communicate important news.

The post Office 365 Takes Aim at Spoofers but Users See Warnings About Fraudulent Messages appeared first on Petri.

Continue reading Office 365 Takes Aim at Spoofers but Users See Warnings About Fraudulent Messages

With Spoofed Calls on the Rise, FCC Seeks New ID Authentication Program

Spoofing a phone number is not a new concept, you probably get several calls from them a day, but with the accessibility of VoIP solutions and open source software spoofing a phone number is a breeze.
Telemarketers, robocalls, spammers, scammers, … Continue reading With Spoofed Calls on the Rise, FCC Seeks New ID Authentication Program