Why Email Security is a Top Cyber Security Control

Cyber security frameworks play an integral role in ensuring organisations have adopted the latest and best practice standards and strategies to safeguard their information systems and data. The most commonly adopted industry standard frameworks include the NIST Cyber security Framework, the CIS Controls, and ISO/IEC 27001/2. But, of these industry frameworks, only the ISO/IEC 27001/2 standard […]

5 Big Myths about DMARC, Debunked

A guest blog from Agari. With email attacks contributing to billions of lost dollars each year, a growing number of organisations are adopting Domain-based Message Authentication, Reporting & Conformance (DMARC) in an effort to protect themselves and their customers from fraudsters. Adoption of DMARC has steadily gained traction, and more than 70% of all email inboxes worldwide support […]

Email Security Case Study: United International Pictures

The challenge of increasingly sophisticated phishing campaigns Since 1981, United International Pictures (UIP) has distributed more than 1,000 films under licence, all around the world. As a key player in the movie industry, it has been responsible for more than 100 Academy Award® winners. One of the biggest threats to their data is phishing. In […]

Email Encryption in 2023

If you’ve been in security longer than fifteen seconds, then you’ve almost certainly heard the line: “Encrypting data strengthens its security”. Or something like that anyway. There’s certainly no denying it’s true, if it’s encrypted then it’s worthless to anyone who doesn’t have the key or ability to decrypt it, so that’s a win. It’s […]

The Misdirected Email Mishap: A Lesson from Boris Johnson and Laura Kuenssberg

In recent news, the BBC cancelled an interview with Boris Johnson after briefing notes containing sensitive information were leaked. This incident highlights how crucial it is to secure sensitive data, especially in high-profile contexts like media or political interviews. For businesses and individuals alike, email security is essential to prevent such leaks from happening. The […]

What Is Email Security?

Firstly, apologies for the title, I personally cannot stand those condescending blogs or articles that try to explain what something is because you’re far too unintelligent to work it out yourself. The good news is however, that this isn’t one of those. Email Security is a term so widely interpreted by vendors and the industry […]

Have you seen the mail I just sent?

In 1971 the first ever One Day International cricket match was played; the Nasdaq stock exchange was founded, and Led Zeppelin first played Stairway To Heaven. It was also the year the first electronic mail was formalised in the Request For Comment (RFC) 196 through what became known as the Mailbox Protocol. Ironically, this protocol […]

Policing in the Shadows, from home!

2020 – 2021 was a dream year for cloud computing and the hyperscalers; their profit margins describe that in a far better way than I ever will. So much so that I’m sick of talking about working from home, not working from home, the inevitable small talk when you meet the in-laws… “Are you back […]

BEC Cash-out Methods: Email Fraudsters Experimenting With Alternative Approaches

This article was originally published by Agari in December 2020. Business email compromise (BEC) actors are exploring alternative cash-out methods for spiriting away the profits from their crimes. Traditional bank accounts have long been the go-to choice for email scammers seeking to cash out the funds they’ve pilfered from organizations they victimize. Just since 2016, […]