Security News

ROPEMAKER Exploit Allows for Changing of Email Post-Delivery (Threatpost)
2017-08-23 17:53

An exploit dubbed ROPEMAKER relies on taking advantage of email design functionality, namely by remotely changing CSS in HTML-based emails after they've been sent.

Business Email Compromise Campaign Harvesting Credentials in Numerous Industries (Threatpost)
2017-08-23 17:02

Flashpoint warns of a new business email compromise campaign targeting organizations in various industries with the aim of harvesting credentials.

Simple Exploit Allows Attackers to Modify Email Content — Even After It's Sent! (The Hackers News)
2017-08-23 06:05

Security researchers are warning of a new, easy-to-exploit email trick that could allow an attacker to turn a seemingly benign email into a malicious one after it has already been delivered to...

Scottish Parliament Repels Brute-Force Email Hackers (InfoRiskToday)
2017-08-18 17:18

Attackers Probe for Weak Passwords; No Accounts CompromisedHackers have been targeting the Scottish Parliament in a "brute force cyberattack" aimed at guessing users' email passwords. Security...

Symantec Patches Code Execution Flaw in Email Security Product (Security Week)
2017-08-11 14:26

Symantec has released an update for its Messaging Gateway email security product to address remote code execution and cross-site request forgery (CSRF) vulnerabilities. The more serious of the...

Lithuania to Extradite $100 Million Email Fraud Suspect to U.S. (Security Week)
2017-07-17 19:37

A Lithuanian man who allegedly swindled $100 million (87 million euros) from tech giants Google and Facebook must be extradited to the United States, a court ruled on Monday. "The court has ruled...

Enterprises face 3,680 potential phishing emails each week (Help Net Security)
2017-07-13 14:52

GreatHorn analyzed more than 3.5 terabytes of data – over 373 million corporate emails – to gain insights into the sheer volume of email threats facing enterprises and the role of automated tools...

Business Email Compromise: Attackers Strike Back (InfoRiskToday)
2017-06-29 16:03

What to Do When Fraudsters Resist Organizations' CountermeasuresIn the wake of the surge in business email compromise incidents, many organizations have implemented new anti-phishing controls. But...

British Parliament Targeted by Brute-Force Email Hackers (InfoRiskToday)
2017-06-26 12:18

Poor Password Security Blamed Following Compromise of Up to 90 AccountsMembers of Parliament in Britain have had their remote email access suspended following an apparent brute-force hack attempt...

UK Parliament Cuts Email Access After Cyberattack (Security Week)
2017-06-24 23:58

Britain's parliament shut down external access to e-mail accounts on Saturday following a cyberattack. Parliamentary authorities described the attack as "sustained and determined", in an email...