Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Internxt

How to Make a New Email Address for Secure, Encrypted Messages

Sep 24, 2026 By Nathan James Turner In Internxt
Making a new email address only takes a few minutes. But when creating a new email account, it's worth considering more than just how easy it is to sign up. Your email provider can determine how your messages, attachments, and personal information are protected. This is why Internxt has added Internxt Mail to join its private cloud storage solution, VPN, and other products to guarantee your privacy online with end-to-end encryption.
Read Post
knowbe4

Sophisticated Phishing Operation Continues to Thrive Following FBI Takedown

Sep 24, 2026 By KnowBe4 Team In KnowBe4
China-based cybercriminals are using a sophisticated phishing-as-a-service platform called the “Outsider Phishing Kit” to launch massive phishing campaigns around the world, according to researchers at Group-IB. “The scale of this operation is staggering,” the researchers write. “From December 2025 to May 2026, Group-IB has identified over 100,000 phishing pages targeting 54+ countries, leveraging 267 (and growing) phishing templates.
Read Post
DMARC Explained: How to Stop Attackers From Impersonating Your Domain

DMARC Explained: How to Stop Attackers From Impersonating Your Domain

Sep 22, 2026 By SecuritySenses In SecuritySenses
Email is still the most common way attacks begin. Phishing, business email compromise, and brand impersonation all rely on one simple weakness: by default, anyone can send an email that claims to come from your domain. The protocol that email runs on was never built to verify who a sender really is, so a criminal can forge the "From" address to look exactly like it came from your company, and the receiving mail server has no built-in way to know the difference. That is the gap attackers exploit, and it is the gap DMARC was designed to close.
Read Post
knowbe4

Millions of Phishing Emails Use ASCII Smuggling to Bypass Security Filters

Sep 21, 2026 By KnowBe4 Team In KnowBe4
A massive phishing campaign is using invisible Unicode tag characters to evade security filters, according to researchers at Microsoft. This technique, known as “ASCII smuggling,” has grown popular over the past year for launching AI prompt injection attacks, but the same tactic can hide suspicious text in emails.
Read Post
manageengine

How to secure Exchange Server beyond the CVE-2026-62911 fix

Sep 18, 2026 By Jeyarani Subburaj In ManageEngine
Remote access has always been a core part of how on-premises Exchange works. Users need OWA to read their email from outside the office. Their devices need Autodiscover to set themselves up automatically. Keeping both reachable means keeping Exchange accessible from the Internet, and that opens up more of the server than most organisations realise. CVE-2026-62911 is the latest example. Microsoft released the fix on August 11, 2026.
Read Post
knowbe4

Phishing Emails Use New Technique to Bypass Microsoft 365 Security Filters

Sep 15, 2026 By KnowBe4 Team In KnowBe4
Threat actors are using phishing emails with blank SMTP sender fields to bypass Microsoft 365 security filters, according to researchers at ReliaQuest. Microsoft 365 Exchange Online uses a feature called “RejectDirectSend” to block unauthenticated Direct Send emails from an organization’s trusted domain. If an attacker omits the domain field from these emails, however, RejectDirectSend will no longer block the messages.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.