Critical FortiMail Zero-Day Allows Unauthenticated Arbitrary File Writes
A critical zero-day vulnerability in Fortinet FortiMail enables unauthenticated attackers to write arbitrary files, leading to active exploitation.
Tag
#Email Security
6 results in the archive.
Attackers Use Invisible Unicode Characters to Bypass Email Filters
Threat actors use invisible Unicode characters in phishing emails to evade detection by security filters, complicating phishing identification.
ASCII Smuggling Technique Evolves from AI Prompt Injection to Phishing Evasion
Attackers are leveraging invisible Unicode characters originally used to evade AI detection as a new method to obfuscate phishing emails and bypass security filters.
Jewelbug Hackers Breach Govt Webmail While Conducting Crypto Fraud
The Jewelbug hacker group has breached government and military webmail accounts while simultaneously conducting cryptocurrency fraud, illustrating a dual-threat approach involving cyber espionage and financial crime.
Microsoft 365 AitM Phishing Campaign Targets Payroll and Finance Emails
A widespread phishing campaign uses adversary-in-the-middle techniques to compromise Microsoft 365 accounts and target payroll and finance emails.
Russian Hackers Exploit Zimbra Zero-Click Flaw for Email Theft
CISA warns that Russian state-sponsored group Laundry Bear is exploiting a patched Zimbra zero-click vulnerability combined with phishing to steal emails from enterprise Zimbra Collaboration servers.