MailSecHub aggregates coverage of phishing campaigns, business email compromise, malware delivery, spoofing and email authentication (SPF, DKIM, DMARC) from top reputable sources. The pipeline polls every two hours, deduplicates and classifies each story by threat category — filter by source or topic to get to what is relevant to your environment.
A weekly briefing summarizes the most significant developments, and the same digest is delivered every Monday morning via the newsletter.
AI-powered phishing and account takeover attacks strain defenses across platforms
Skyw4lker is a device code phishing campaign targeting U.S. organizations, abusing legitimate cloud services and authentication mechanisms to compromise corporate accounts while evading traditional detection methods. Attackers exploit trusted workflows to gain access with minimal forensic traces.
AI-powered tools enable attackers to create realistic fake login pages that capture credentials and MFA codes, facilitating account takeovers. This threat impacts email security professionals as these phishing pages are commonly delivered via email and can compromise email accounts through credential theft.
Threat actors exploit legitimate sales processes by sending phishing emails with fake bid invitations and password-protected documents. This tactic leverages professional urgency and mimics trusted company practices, making emails appear legitimate to recipients and security tools alike.
Threat actors are exploiting DLL side-loading in VLC Media Player and VMware Tools to deliver malware via phishing campaigns targeting users in Brazil and Portugal with fake legal notices and financial documents. This technique abuses trusted applications to evade detection.
Proofpoint has joined Microsoft's Integrated Cloud Email Security (ICES) ecosystem, enabling integration of its email security capabilities with Microsoft's platform. This partnership expands email security options for organizations using Microsoft's cloud infrastructure.
Microsoft is integrating AI-powered phishing detection into Teams to identify scams in conversations, particularly in initial external contact exchanges where attackers impersonate support staff. The feature analyzes conversation context rather than relying solely on links or attachments, addressing a common social engineering threat vector.
Russian-linked hackers Sandworm and UAC-0099 used a spear-phishing email with malicious attachment to breach a Ukrainian logistics company, deploying a new mesh network backdoor for destructive wiping attacks.
Attackers are conducting widespread token-spraying attacks against Microsoft 365 accounts to compromise corporate email for business email compromise (BEC) campaigns. The attacks combine phishing, stolen session tokens, and social engineering to breach corporate networks and email systems.
Article ranks top 10 email encryption services for 2026, evaluating how well they balance strong cryptography with usable recipient experiences. Focuses on sender-side automation, control depth, and compliance features relevant to email security professionals selecting encryption solutions.
Account takeover attacks allow threat actors to impersonate legitimate users and organizations via compromised email accounts, bypassing traditional security controls. Attackers can then conduct fraud, theft, and malware distribution while appearing trustworthy, making detection difficult.
EU regulators are investigating Booking.com's protection measures against phishing attacks targeting its customers. The Commission will assess whether the platform has implemented adequate safeguards. This highlights platform responsibility for email-based fraud threats.
Interpol coordinated arrests of 1,462 cybercriminals across Africa, seizing $105M in assets. The crackdown targeted gangs behind online fraud, ransomware, and BEC attacks, demonstrating international law enforcement efforts against cybercrime.
North Korean Lazarus hackers are using post-quantum encryption in Operation FlashHole to conceal malware payloads from security tools in campaigns targeting South Korean organizations. The attack combines phishing with modern cryptography to evade detection of command-and-control communications.
Researchers discovered Athena StealthRoute, a phishing-as-a-service platform with AI capabilities that generates phishing lures and decoy content to hide malicious activity. This poses a significant threat as it lowers the barrier for attackers to launch sophisticated phishing campaigns against email users.
Generative AI is making malicious emails harder to detect by eliminating behavioral tells like poor grammar and generic templates. Attackers now use AI to craft fluent, personalized messages that evade behavior-based email security filters. This erodes a key detection mechanism email security professionals have relied upon.
The week's most important email-security news, curated and summarized — every Monday morning. No tracking, one-click unsubscribe.