After Gmail and other key players, Zoho Mail is now openly supporting BIMI, allowing senders to display their brand logos with a blue verified checkmark in Zoho mailboxes. Email security risks are on the rise, stressing 95% of the top 500 cybersecurity leaders about it.
As an unsuspecting internet user, if you come across an email from someone whose email address ends with a ‘.com’ or ‘.org,’ you might not think twice before opening it. After all, it comes from one of the widely recognized TLDs (top-level domains) out there. But in the context of cybersecurity, not everything that looks legitimate is to be trusted.
![Healthcare Breaches Confirmed, Microsoft Releases Patches, FBI Issues Advisory – Cybersecurity News [November 11, 2024]](https://www.duocircle.com/wp-content/uploads/2024/11/sender-policy-framework-7.jpg)
Your week’s wait is over since we are once again at your service, delivering the latest news and happenings in the cybersecurity world. The news pieces are freshly curated from authentic sources, providing you with insights on recent threat landscape scenarios. The news sections we cover further down the article include significant data breaches affecting healthcare providers, Microsoft’s latest patch addressing its vulnerabilities, the FBI’s warning about usage of hacked police email accounts, the rise of the new Interlock ransomware, and finally, the success of CISA’s ScubaGear tool, improving Microsoft 365 security configurations in cloud settings. Let’s explore and understand each section in detail.
Email domains use DNS to secure communications from eavesdroppers. They aim at preventing phishing, spoofing, ransomware, and impersonation attacks. DNS records also include a DMARC record, which is implemented and configured by the owner of the specific domain with the intention of allowing only authorized entities to send emails from that domain. A DMARC record consists of DMARC policies that instruct the receiving server on how to deal with unauthorized emails sent from your domain. By unauthorized emails, we mean outgoing emails from your domain that didn’t pass the DMARC checks.
AI is everywhere, from your smartphones and home appliances to high-efficiency systems in workplaces and industries. It is officially the era of artificial intelligence, where bots have taken over almost every domain, including cybersecurity.
DMARC’s purpose of instructing receiving servers on how to handle unauthorized emails from your domain is achieved based on what policy you have set in your DMARC record. While p=reject is undoubtedly the strictest policy, there are conditions in which it isn’t a suitable one.
![Global Data Breach, Nokia Data Sold, Schneider Electric Breach – Cybersecurity News [November 04, 2024]](https://www.duocircle.com/wp-content/uploads/2024/11/dmarc-reporting-service-1.jpg)
Presenting a fresh bundle of exciting, handpicked news to enhance your knowledge and keep you informed. We will cover points revolving around news items ranging from a man being allegedly involved in significant data extortion, third-party associated risks hampering the ISMS protocols, a budding ransomware group demanding huge ransom, advancements in AI vulnerability detection, and last but not least, Okta’s recent fix for a username-related security flaw. Let’s dive deep into the details!
Threat actors use psychological tactics to manipulate victims into believing they are communicating with benevolent people. They know how to exploit older adults’s poor ability to spot the red flags of scams. In fact, in a recent study, 182 participants aged between 18 and 90 with normal cognitive function were given two separate tests to predict susceptibility to phishing. The results clearly revealed that it was easier for younger participants to distinguish between phishing and safe emails than older people. So, basically, the older you are, the higher the risk of falling into the trap of cybercriminals.
Phishing attacks have spread over the digital world like a plague. Not only are these attacks frequent, but they are also grave and capable of causing irreparable damage to your brand’s reputation. Not to mention the financial toll; phishing attacks cost companies an average of $4.88 million per data breach.
Emails are one of the most used mediums for attempting phishing. Irrespective of your industry and operational style, if your work involves the exchange of emails (which almost every business does in today’s time), then you could be the target of phishers.