Tag Library
email security
Stories from across the site that focus on email security.
How Attackers Exploit Microsoft Power BI to Bypass Email Filters and Launch Phishing Attacks
Discover how hackers use legitimate Microsoft Power BI dashboards to trick users into downloading remote access tools, enabling persistent network access and potential data breaches.
Oct 12, 2026
Why Microsoft Is Blocking .msix and .msixbundle Files in Outlook and What It Means for Security
Microsoft will block .msix and .msixbundle attachments in Outlook to reduce malware risks. Learn why, who is affected, and what admins should do.
Oct 7, 2026
Critical Microsoft Exchange Flaw Lets Hackers Access Internal Mailboxes—Immediate Patch Needed
A high-severity Microsoft Exchange vulnerability enables attackers with basic credentials to access colleagues' mailboxes. On-prem Exchange Server users must update now to prevent privilege escalation risks.
Oct 6, 2026
How a Single Email Can Exploit AI Agents: Understanding Prompt Injection Risks
AI agents connected to email and other services risk executing hidden malicious commands via prompt injection attacks, bypassing current safeguards. Learn what this means and how to mitigate it.
Oct 2, 2026
Massive Rise in Calendar-Based Phishing: What Users Must Know to Stay Safe
Calendar phishing attacks surged by 33,000% recently, bypassing email filters and exploiting ICS invites. Learn how these attacks work and how to protect yourself effectively.
Sep 18, 2026
Phishing via Fake Voicemail Transcript Emails: What You Need to Know
A surge of phishing attacks uses fake voicemail transcript emails with malicious SVG attachments to steal credentials from thousands of organizations.
Sep 15, 2026
How Hackers Use Invisible Unicode Characters to Bypass Email Phishing Filters
Phishing attackers insert invisible Unicode characters into keywords to evade spam filters and trick AI email agents, requiring updated defenses to detect such stealthy threats.
Sep 7, 2026
How a Lenovo Verification Flaw Led to Over 5,000 Dropbox Account Hacks
A vulnerability in Lenovo's email verification allowed hackers to hijack thousands of Dropbox accounts using only email addresses, highlighting risks of third-party login integrations and missing two-factor authentication.
Sep 2, 2026
Phishing in Calendar Invites: Security Risks and How to Respond
Calendar-based phishing attacks are on the rise. Learn why .ics invites pose new risks, the gaps in traditional security, and practical steps to protect your organization.
Aug 26, 2026
How Malware Uses Google Passkeys to Maintain Email Access After Password Resets
A novel malware toolkit hijacks email accounts by creating attacker-controlled passkeys, persisting access beyond password changes and session terminations. Learn how to detect and remove these hidden threats.
Aug 21, 2026
How a Social Engineering Attack Breached a US Defense Supplier’s Email System
A top US defense contractor faced an email breach after hackers used a fake login to access sensitive military and aerospace data. Learn how this impacts security practices.
Aug 11, 2026
How Hackers Exploit Real Microsoft Login Pages to Bypass MFA
Discover how cybercriminals use genuine Microsoft login pages to trick users into granting app permissions, bypassing multi-factor authentication and compromising corporate accounts.
Aug 4, 2026