Chainalysis says an intruder saw some customer identity data
The blockchain sleuth says an intruder hit internal tools and saw some customer identity data. No investigation content, passwords, or tokens were exposed, it says.
3 Nov 2026
Email Vox — latest email industry news
Ivanti VPN bugs hit CISA’s KEV as exploit chains go to root
CISA’s KEV now lists Ivanti Connect Secure bugs after live exploitation. One is a missing-auth flaw scoring 8.8. Attackers can chain three for root, says a report.
3 Nov 2026
Your inbox‑safe plan for a noisier week of phish
A week of breaches and takedowns means more phishing noise—just as Gmail gets pickier. Here’s a precise, testable plan to harden without tanking placement.
2 Nov 2026
Latest
Attackers are abusing Drupal Commerce Core. Patch now
Drupal says attackers are abusing a “highly critical” access bypass in Commerce Core. 42,000+ sites use it. Patches are out; order audits urged.
2 Nov 2026
Passkeys won’t save you from bad recovery
Passkeys kill off password phish. The catch: attackers will just walk around them—through recovery, weak enrollments, and hijacked sessions—unless you keep checking trust.
2 Nov 2026
Red Sift’s fall drop: AI DMARC triage, Sentinel feed, and a Certbot double‑check
AI-assisted DMARC triage, a Sentinel feed, a proper API, and a Certbot check aim to cut manual work—and get you to p=reject before lifetimes shrink again.
1 Nov 2026
Sony’s So-net breach exposes 2.6m records, 54k mail passwords
Sony’s ISP confirmed 2.6 million subscriber records were accessed and 54,000 mailbox passwords leaked. Password resets started October 27 after a weeklong sprint.
1 Nov 2026
Hacker posts 41,000+ DHS employee records. Okta disputes link
A searchable dump names tens of thousands at CBP, ICE, HSI and more. The hacker says Okta SSO; Okta says it wasn’t breached. Email risk: targeted lures.
31 Oct 2026
FBI seizes Virtualine, a go‑to host for phish and sextortion
The FBI grabbed virtualine.net, but TRM Labs says seizures don’t always stop bulletproof hosts—phishers and ransomware crews can just move next door.
31 Oct 2026
New ‘Aokigahara’ stealer raids dev keyrings and AI sessions
A new infostealer reportedly ransacks dev keyrings and AI assistant sessions, turning one infected machine into a shortcut to code, cloud, and company context.
30 Oct 2026
Gmail’s inbox placement just took a sharp turn
Validity says Gmail inbox placement slipped nearly 10% this year. Here’s what moved the needle—and what marketers should change before holiday sends.
30 Oct 2026
Harden deliverability when security headlines spike
A practical hardening run you can finish this month—patches first, DKIM proof next, then guardrails for device-code phish and token replay—without sinking inbox placement.
29 Oct 2026
Adobe patches 8 critical Campaign Classic bugs. Don’t wait.
Eight Campaign Classic flaws could enable code execution, bypasses and privilege escalation. One, CVE‑2026‑104351, scores 9.9. Patching isn’t optional for marketing stacks.
29 Oct 2026
Skyw4lker leans on device codes to phish U.S. orgs
ANY.RUN flags “Skyw4lker” using device code phishing to slip into U.S. corporate accounts by piggybacking on trusted cloud sign-ins.
29 Oct 2026
DKIM’s simplest check: hash an empty body and compare
A simple, reproducible test proves your DKIM signer isn’t mangling whitespace.
28 Oct 2026
AI-made login clones now grab MFA and sessions, too
Criminals are cloning sign-in screens so well they can grab MFA and sessions, not just passwords.
28 Oct 2026
Proofpoint plugs into Microsoft’s ICES. One console, more signal.
Proofpoint’s detections will now show up inside Microsoft Defender. The pitch: fewer consoles, faster investigations, and layered AI-driven blocking for phishing, BEC, and ransomware.
27 Oct 2026
Huntress: Microsoft 365 token replay hit 79 orgs
Huntress tracked an AitM token‑replay spree from mid‑July to late September that slipped into dozens of Microsoft 365 tenants without re‑prompting MFA.
27 Oct 2026
AI is sweet‑talking help desks past MFA
Attackers are skipping malware and just calling the help desk. AI is making their pretexts smoother. The weak spot isn’t your endpoint. It’s your process.
26 Oct 2026
Microsoft’s ‘Guardian Agents’ want to police your AI agents
Microsoft’s Project Perception adds Guardian Agents to watch AI agents. Dark Reading says experts worry “agents watching agents” could pile on risk, not reduce it.
26 Oct 2026
When supply chains wobble, keep your email upright
Hijacked packages, cracked CAs, and mass tenant hits are touching email. Here’s how to patch, rotate, and prove your mail is safe—without killing delivery.
25 Oct 2026
PHP2Shell went live before the patch. Fix your web touchpoints now
Exploits hit before the patch. Millions of PHP hosts likely stayed vulnerable after. Here’s what actually helps—and what email teams should fix first.
25 Oct 2026
Microsoft says Storm‑0940 used AI to hit 2,200+ tenants via ConnectWise
Microsoft names a China‑linked crew and an AI pentest toolkit behind the ConnectWise Cloud Backup compromise — a fast, automated run at thousands of tenants.
25 Oct 2026
AI pen-test tool fuels massive hacks for $12
Researchers say a Chinese-speaking crew used the Cairn AI pen-test tool to loot hundreds of sites, while another campaign grabbed domain control for $12.
24 Oct 2026