MailSecHub aggregates coverage of phishing campaigns, business email compromise, malware delivery, spoofing and email authentication (SPF, DKIM, DMARC) from top reputable sources. The pipeline polls every two hours, deduplicates and classifies each story by threat category — filter by source or topic to get to what is relevant to your environment.
A weekly briefing summarizes the most significant developments, and the same digest is delivered every Monday morning via the newsletter.
AI-powered phishing and account takeover attacks strain defenses across platforms
Proofpoint has joined Microsoft's Integrated Cloud Email Security (ICES) ecosystem, enabling integration of its email security capabilities with Microsoft's platform. This partnership expands email security options for organizations using Microsoft's cloud infrastructure.
Microsoft is integrating AI-powered phishing detection into Teams to identify scams in conversations, particularly in initial external contact exchanges where attackers impersonate support staff. The feature analyzes conversation context rather than relying solely on links or attachments, addressing a common social engineering threat vector.
Russian-linked hackers Sandworm and UAC-0099 used a spear-phishing email with malicious attachment to breach a Ukrainian logistics company, deploying a new mesh network backdoor for destructive wiping attacks.
Attackers are conducting widespread token-spraying attacks against Microsoft 365 accounts to compromise corporate email for business email compromise (BEC) campaigns. The attacks combine phishing, stolen session tokens, and social engineering to breach corporate networks and email systems.
Article ranks top 10 email encryption services for 2026, evaluating how well they balance strong cryptography with usable recipient experiences. Focuses on sender-side automation, control depth, and compliance features relevant to email security professionals selecting encryption solutions.
Account takeover attacks allow threat actors to impersonate legitimate users and organizations via compromised email accounts, bypassing traditional security controls. Attackers can then conduct fraud, theft, and malware distribution while appearing trustworthy, making detection difficult.
EU regulators are investigating Booking.com's protection measures against phishing attacks targeting its customers. The Commission will assess whether the platform has implemented adequate safeguards. This highlights platform responsibility for email-based fraud threats.
Interpol coordinated arrests of 1,462 cybercriminals across Africa, seizing $105M in assets. The crackdown targeted gangs behind online fraud, ransomware, and BEC attacks, demonstrating international law enforcement efforts against cybercrime.
North Korean Lazarus hackers are using post-quantum encryption in Operation FlashHole to conceal malware payloads from security tools in campaigns targeting South Korean organizations. The attack combines phishing with modern cryptography to evade detection of command-and-control communications.
Researchers discovered Athena StealthRoute, a phishing-as-a-service platform with AI capabilities that generates phishing lures and decoy content to hide malicious activity. This poses a significant threat as it lowers the barrier for attackers to launch sophisticated phishing campaigns against email users.
Generative AI is making malicious emails harder to detect by eliminating behavioral tells like poor grammar and generic templates. Attackers now use AI to craft fluent, personalized messages that evade behavior-based email security filters. This erodes a key detection mechanism email security professionals have relied upon.
The EU is investigating Booking.com under the Digital Services Act for inadequate efforts to prevent fraud, phishing, and smishing on its platform. The probe covers whether the travel site fails to stop fraudulent listings and protect users from scams.
Threat actors are hijacking email threads by appending malware and phishing content to legitimate conversations, exploiting recipient trust in known senders. This tactic targets users by hiding malicious payloads within ongoing email exchanges.
SafePay ransomware gang claims over 600 victims since 2024, using password guessing, vulnerability exploitation, and phishing attacks to target businesses and critical infrastructure, according to FBI and international cyber agencies.
Attackers leverage generative AI to create custom malware and obfuscate phishing messages, overwhelming signature-based detection systems. This accelerates ransomware attacks from initial compromise to encryption. Traditional security rules become less effective against rapidly generated, unfamiliar code variants.
The week's most important email-security news, curated and summarized — every Monday morning. No tracking, one-click unsubscribe.