Yahoo Japan has mandated DMARC and domain authentication

Yahoo Japan has mandated DMARC and domain authentication

 

In November 2023, Yahoo announced that by February 1st, 2024, any company that sends more than 5,000 emails per day has to deploy DMARC to minimize the risk of email-based spoofing, phishing, and ransomware. After this announcement, the rate of DMARC adoption surged, and now Yahoo Japan has also made DMARC and domain authentication mandatory for users as of December 2024. Experts see this as a great opportunity to improve companies’ email security posture. (more…)

Is your DMARC enforcement strict enough?

Is your DMARC enforcement strict enough?

 

Back in 2024, email service providers such as Google and Yahoo rolled out new email-sending policies. One would have thought that organizations would begin to take email security more seriously, but so far, that hasn’t been the case. In fact, cybersecurity experts have found that phishing attacks have shot up, with the number of phishing messages increasing by 202% in the second half of 2024.

(more…)

New PhishWP Threat, Illicit Marketplace Live, Codefinger Targets AWS – Cybersecurity News [January 13, 2025]

New PhishWP Threat, Illicit Marketplace Live, Codefinger Targets AWS – Cybersecurity News [January 13, 2025]

New PhishWP Threat, Illicit Marketplace Live, Codefinger Targets AWS – Cybersecurity News [January 13, 2025]

by DuoCircle

 

Cybercriminals are enhancing their capabilities, as evidenced by the latest PhishPWP phishing threat. Similarly, this week’s cybersecurity bulletin highlights the latest ransomware attack on AWS servers, making recovery impossible without the attacker’s key. We also look at how cybercriminals use popular social media channels like Telegram. Zero-day attacks are the most dangerous of all, as they emerge from practically nowhere. This week’s news highlights one such attack on Fortinet FortiGate firewall users. Finally, we round off a reputed university shutting off classes, fearing a cyber-attack on its network.    

(more…)

Gmail security requirements for brands and businesses

Gmail security requirements for brands and businesses

 

Gmail is one of the best email service providers in the world. Gmail has managed to beat all the competition because of its state-of-the-art features and seamless integration with other Google services. With a whopping user base of 1.8 billion, Gmail focuses extensively on security requirements and restrictions in order to enhance user safety and data privacy.

(more…)

Gmail security requirements for brands and businesses

Implementing DKIM the right way: A guide for ESPs

 

You might have heard that email authentication protocols are only for businesses, but that’s not entirely true! 

Don’t you think email security is crucial for everyone, including businesses that send email campaigns and email service providers (ESPs) that facilitate them? If so, you can agree with us when we say that email authentication is a must for every entity in the email ecosystem, including the ESPs. 

(more…)

Enforcement rules for DMARC for optimum protection against phishing and spoofing

Enforcement rules for DMARC for optimum protection against phishing and spoofing

Enforcement rules for DMARC for optimum protection against phishing and spoofing

by DuoCircle

 

Just like SPF offers domain owners the choice between Softfail and Hardfail, DMARC has three enforcement rules: none, quarantine, and reject. Each has its own significance and relevance in the DMARC compliance journey. 

(more…)

Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge – Cybersecurity News [January 06, 2025]

Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge – Cybersecurity News [January 06, 2025]

Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge – Cybersecurity News [January 06, 2025]

by DuoCircle

 

Ensuring proper cybersecurity is at the top of every organization’s agenda this year. That explains why Microsoft cautions its Windows 10 users and asks them to upgrade their PC’s OS before the 14 October 2025 deadline. However, even the most robust cybersecurity strategies might seem inadequate, especially as three more telecoms become victims of the Salt Typhoon.

(more…)

Understanding everything about DMARC records and tags

Understanding everything about DMARC records and tags

 

Email security is a growing concern for businesses and individuals alike. Increased email spoofing and phishing attempts have made it crucial to implement security measures to safeguard communication channels. One such powerful tool to protect email communications is DMARC or Domain-based Message Authentication Reporting and Conformance. Its job is to authenticate email messages and take suitable action against unauthorized emails. The DMARC policy works in coordination with SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail)  protocols.

(more…)

What is Apple Business Mail and how can you set it up using Apple Business Connect

What is Apple Business Mail and how can you set it up using Apple Business Connect

What is Apple Business Mail and how can you set it up using Apple Business Connect

by DuoCircle

 

Apple Mail is not very prominently used in business emails because, unlike Gmail, Yahoo, and other mailboxes, it doesn’t support BIMI. However, Apple has taken the initiative to resolve this issue. With the latest iOS 18.2 update, Apple is now letting its users send branded emails that carry their unique identity. In simple words, you can send emails that show your brand logo and name, just like BIMI. This is done to build trust among companies regarding email authentication

 

Apple Mail is not very prominently used in business emails because, unlike Gmail, Yahoo, and other mailboxes, it doesn’t support BIMI. However, Apple has taken the initiative to resolve this issue. With the latest iOS 18.2 update, Apple is now letting its users send branded emails that carry their unique identity. In simple words, you can send emails that show your brand logo and name, just like BIMI. This move enhances email security and builds trust among companies regarding email authentication.

(more…)

Gmail security requirements for brands and businesses

Best practices to make Privileged Account and Session Management a breeze

Best practices to make Privileged Account and Session Management a breeze

by DuoCircle

 

Let’s ask you a pertinent question about your organization’s security.

Do you think that the accounts that manage your organization’s most critical systems and sensitive data are well protected? 

If you have to think twice before answering this question, chances are that these might not be as secure as they should be. 

(more…)

Pin It on Pinterest