#email-security
40 stories taggedemail-security.
Microsoft says Defender missed 221 high-severity emails per thousand users and still won its own benchmark
The vendor's fifth quarterly scorecard shows missed-threat rates climbing across the industry as AI-written phishing gets harder to catch.
The Longitude Problem: Why Ground Truth Beats Guesswork in the AI Age
For centuries, sailors died because they could estimate their position but not confirm it. Attackers targeting your company today face the same gap, and your best defence is the same one that finally solved navigation.
Invisible Characters, SIM Swap Jail Time, and a $10 Million Bounty: This Week's Security Briefing
A trick that hides malicious text from spam filters, a phone-hijacking criminal now behind bars, and a US government reward for help catching an Iranian hacking official.
Hackers Are Actively Exploiting a Critical Flaw in Cisco's Email Security Appliance
A zero-day vulnerability in Cisco Secure Email Gateway lets an unauthenticated attacker run any command they like as the most powerful user on the system. No login required.
What to do in the first hours of a Google Workspace breach
A new webinar walks through real incidents inside Google Workspace and the early choices that either contain the damage or make it worse.
The QR Code Hiding in Plain Text: This Week's Sneakiest Phishing Trick
Attackers built scannable QR codes out of typed characters to slip past image-blocking filters, while a trusted developer tool shipped credential-stealing code.
Phishing gang hides invisible characters inside emails to slip past filters
Microsoft says attackers are splitting bait words like 'funding' with unprintable Unicode tags so security scanners never see them.
Microsoft Defender for Office 365 is blocking Google search links by mistake
A faulty security classification inside Safe Links is flagging normal Google URLs as malicious, and copy-pasting them into a browser does not help.
Hidden Text in Emails Can Trick AI Assistants Into Showing You Fake Numbers
Researchers planted invisible instructions inside ordinary emails and watched an AI summariser rewrite invoice amounts and meeting dates without any warning to the reader.
Your AI email assistant can be fed a fake message while you read a real one
Researchers hid nearly 500 characters of secret instructions inside an ordinary-looking email. The AI summariser obeyed them every single time.
AI-powered phishing is slipping past email filters. Here's how to catch it after the click.
Email gateways can't spot every AI-written lure. The catch now happens at the identity and endpoint layer.
Poland's CERT warns of active attacks on critical Zimbra email flaw
CERT Polska says attackers are exploiting CVE-2026-73570 in Zimbra Collaboration Suite. Zimbra patched the bug in version 10.1.20 on 20 July 2025.
Phishing Has a New Problem: The Attacker Isn't Human Anymore
Email defences built for bad links and bad attachments are struggling as AI agents start writing, sending, and even reading the mail on both sides.
Met Police Exposes Email Addresses of 140 Alleged Al Fayed Victims in Basic CC Blunder
Scotland Yard sent a routine investigation update and accidentally revealed survivors' identities to each other, in a force already under formal enforcement action for data protection failures.
SonicWall Patches Critical Flaws in a Security Platform It Already Retired
Two vulnerabilities scored near-perfect danger ratings and could let criminals break into systems without a password. One of the affected products was officially shut down last October.