Email security

With the power of zero trust and AI, Zscaler help organizations strengthen and automate IT and security, reduce costs, and minimize complexity. Zscaler helps reduce the attack surface, block threats via full TLS inspection, and eliminate lateral threat movement. This segment is sponsored by Zscaler. Visit https://securityweekly.com/zscalerrsac to ...

BleepingComputer reports that attacks involving a critical stack-based overflow zero-day vulnerability impacting Qualitia's web-based email client Active! mail, tracked as CVE-2025-42599, have been launched against major Japanese organizations.

Targeted cyberattacks were discovered by Darktrace researchers to have been obscured by threat actors through spam bombing attacks against email systems, according to SiliconAngle.

Independent bureau of Treasury notified Congress that hack was a “major incident.”

The U.S. Treasury Department's Office of the Comptroller of the Currency had more than 150,000 emails disclosed by people close to the matter.

Xanthorox AI purports to offer five models specifically designed to aid malicious activity.

BleepingComputer reports that hacked Mailchimp, SendGrid, Mailgun, HubSpot, and Zoho accounts have been harnessed for the mass distribution of crypto seed phrase-containing emails aimed at compromising Coinbase and Ledger cryptocurrency wallets as part of the widespread PoisonSeed campaign, which has already impacted the Mailchimp account of Have I Been Pwned administrator Troy Hunt and certain Coinbase users last month.

Attackers can – and do – set up phony accounts to launch attacks – here’s how defenders should respond.