MailSecHub aggregates coverage of phishing campaigns, business email compromise, malware delivery, spoofing and email authentication (SPF, DKIM, DMARC) from top reputable sources. The pipeline polls every two hours, deduplicates and classifies each story by threat category — filter by source or topic to get to what is relevant to your environment.
A weekly briefing summarizes the most significant developments, and the same digest is delivered every Monday morning via the newsletter.
Barracuda flaws and phishing campaigns intensify email attack surface this week
Phishing attacks in Europe surged 4.5x year-over-year, three times faster than the global 1.5x increase, according to Proofpoint research. This regional spike indicates European organizations face elevated email-based threats. Email security professionals should prioritize defenses and monitoring for their European assets.
AI is enabling attackers to automate and scale phishing campaigns and other attacks faster than before, pressuring SOC teams to investigate more suspicious activity. The article discusses how cybercriminals leverage AI for efficiency while defenders struggle to keep pace with the increased attack velocity and volume.
A phishing campaign since August 2026 steals Google sessions from corporate users via calendar invites, bypassing standard link-security checks. Material Security's threat team discovered the operation, termed CloudFire, and took down hundreds of attacker domains. This targets enterprise email security defenses.
Cofense enhanced its AI Classification Engine to learn from analyst decisions and automate high-confidence email classifications in its Phishing Remediation solution. The update improves phishing detection and response through adaptive AI-driven automation.
Researchers discovered BluePhishing, a new attack technique leveraging Microsoft Entra AI agents to hijack enterprise accounts without stealing credentials. Attackers trick users into approving fake AI agents, exploiting OAuth consent mechanisms. This poses significant risk to Microsoft 365 environments and email security infrastructure.
Barracuda warns of pre-authentication authorization bypass and command-injection vulnerabilities in its Email Security Gateway products. When chained, these flaws allow attackers to execute commands with root privileges. Active exploitation affecting a small number of organizations has been confirmed.
AI-powered malware analysis tools help security teams discover hidden phishing attacks, correlate threats, and automate reporting to reduce SOC investigation workload and operational burden.
Barracuda confirmed active exploitation of two vulnerabilities in its Email Security Gateway allowing unauthenticated root access via authorization bypass and command injection. A small number of organizations are affected. This represents a critical threat to email infrastructure security.
Blind Eagle threat actor targets Latin American organizations with phishing emails impersonating court notices and administrative documents to deliver a remote access trojan (RAT). The malware shares similarities with AsyncRAT and DCRat, posing significant risk to enterprise email security and credential theft.
AI-powered malware analysis tools help SOC teams investigate sophisticated phishing attacks more efficiently by automating execution, redirect-following, and infrastructure analysis. This addresses the challenge of multi-stage attacks disguised to appear benign, reducing investigation time.
Outlook.com is rejecting legitimate emails due to overly strict SPF and DMARC validation errors following Microsoft's authentication enforcement. This widespread issue affects email deliverability and impacts both senders and security professionals managing email authentication standards.
Security researchers discovered ARTEX, an AI penetration-testing framework, exposed on 1,465 public servers alongside cyberattack tools including C2 infrastructure, phishing software, and exploit kits. The exposure reveals how automated security-testing platforms are being repurposed or misused for actual attacks.
Two critical vulnerabilities in Barracuda Email Security Gateway can be chained to grant root access without authentication. The authorization bypass (CVE-2026-116606) enables unauthenticated attackers to restore backups and execute commands. Patches were released Monday; watchTowr disclosed details Thursday.
A Dark Reading editorial discussing an ill-conceived phishing simulation involving the Knicks and a hacktivist attack on a US government agency. The segment covers security incidents that warranted but lacked detailed coverage. Relevant to understanding real-world phishing execution and awareness training failures.
Researchers discovered a patched vulnerability in OpenAI's ChatGPT Lockdown Mode that could bypass protections and enable silent chat data theft and phishing attacks. The flaw has already been fixed, but highlights risks from prompt injection attacks. This is relevant to email security professionals concerned with AI-driven threats.
The week's most important email-security news, curated and summarized — every Monday morning. No tracking, one-click unsubscribe.