Tip of the week: Enable a firewall on your network to filter and monitor traffic. This will stop unwanted traffic from passing through.

No more spam in your inbox! Disposable email addresses are the insider tip for anyone wanting to protect their privacy.

Register anonymously with unknown services
Enter competitions without spam risk
Online shopping without marketing harassment

At mailbox.org, disposable addresses are part of the complete package in standard and premium tariffs.

How it works and why you need it: https://mailbox.org/en/post/how-disposable-addresses-against-digital-threats

Tip of the week: Think before you click. Don’t let too-good-to-be-true links and buttons fool you into having your information stolen.

I monitor a handful of mistyped domains for clients and it is interesting and scary how much sensitive data is transmitted over email, and how much of that ends up in typo squatted domains.

Maybe AI (machine learning) could provide a solution where email clients would check email domains for spelling errors and warn the user.

It could use the employee company domain as a starting point then check a list of previous emails as a reference, etc. It would not be perfect, but it could help. I am sure this approach has issues but maybe something would help.

Mail relays | Are you forwarding mail without checks, validation, or spam filtering? You could be creating a real mess.

Typos, spamtraps, and forged senders can quickly snowball into blocklistings and delivery failures.

In part two of our short series on mail relays, we jump into the chaos careless forwarding can cause, and what you can do to avoid it:

https://www.spamhaus.org/resource-hub/deliverability/mail-relays-part-2-problems-with-forwarded-mail

1. Hacker News, a #CyberSecurity newsletter, is sent from a domain where DMARC policy is p=none, which tells email providers, like gmail, to deliver all email that is screaming, "I am a Hacker News spoof email sent by a POS scammer" to the intended recipient anyway. p=none means take no action, even if you know it's a scam. Spam folder optional. Email services and clients will oblige. WTF Hacker News?

2. Hacker News is also using an insecure signature algorithm for signing their newsletter.

3. An extremely well-known Cybersecurity expert is sending the newsletter from a domain that has no DMARC record at all, so all spoof emails claiming to be from them will be delivered. And likely this is being constantly exploited. A DMARC policy of p="reject" would have those spoof emails trashed and not delivered. But no DMARC policy means "whatever, and I don't want to know". So, spoof emails go through unstopped and no reports of abuse are being sent to this person either. And it's their job to tell us how to stay secure and not be fooled by spoof emails. WTF?

Sometimes I don't understand how things work in the world.

Tip of the week: It’s tempting, but avoid using public wireless networks as any information you send can be accessed by others on the network. Stay safe out there!

We keep being asked why Findalyze suggests SPF records for all (sub)domains of an org, so we wrote a blog post about it.

TL;DR: spoofing does not care from which domain you normally send emails because receivers don't know this either

https://www.findalyze.com/en/blog/know-how/faq-how-can-spf-records-for-every-single-sub-domain-help-to-prevent-phishing?utm_campaign=blog-content&utm_medium=social-media&utm_source=mastodon-ais

Tuesday again already? Stay safe with Koko with his IT tips!

Tip of the week: Do you know what your digital footprint looks like? Search for information about yourself to see what is public and should remain private.

Email authentication used to be something only big players worried about. Not anymore. While small senders may not feel the heat yet, it’s only a matter of time before it reaches them...

Want to stay ahead of the curve?

Learn how authentication can be implemented at the relay level to improve deliverability, prevent abuse, and protect your reputation before problems hit.

https://www.spamhaus.org/resource-hub/deliverability/mail-relays-part-1-authenticate-your-outgoing-mail/

Russia-linked hackers target webmail servers in Ukraine-related espionage operation https://www.helpnetsecurity.com/2025/05/15/espionage-operation-roundpress-webmail-servers/ #RussianFederation #cyberespionage #emailsecurity #News #ESET #APT #XSS

Happy Tuesday! Get some more tips from Koko!

Tip of the week: It might be tempting to share a password with friends or family over text, but remember to only share passwords with those who truly need them using a secure password sharing software.

Gmail Sunsets 3DES Triple Data Encryption: Security Upgrade Impacts Email Senders May 30

#Gmail #3DES #Encryption #CyberSecurity #EmailSecurity #Google #TechNews #SMTP #TLS #Alphabet #BigTech

https://winbuzzer.com/2025/05/08/gmail-sunsets-3des-triple-data-encryption-security-upgrade-impacts-email-senders-may-30-xcxwbn/

It's Tuesday! Stay safe when downloading software!

Our Houston-based client is looking for a 𝗿𝗲𝗺𝗼𝘁𝗲 (must be in Mexico) Senior Email Security Analyst with experience with Abnormal Security or a similar email security platform. If you're interested, please apply in English :

https://recruiterflow.com/nsc/jobs/38

A tidy digital workspace can boost your productivity!

Tip of the Week: Spring into action! Clear out your digital clutter this April by organizing files, deleting old emails, and backing up important data.

https://greek-nea.com/epithesi-phishing-sto-gmail-pos-na-prostatefteite #BBGR #BigBrotherGR #Google
#Gmail #Phishing #CyberSecurity #OnlineSafety #Hacking #DataProtection #SecurityAlert #GoogleSecurity #EmailSecurity #PhishingScam #StaySafeOnline #TechNews #InternetSecurity #CyberAttack #GmailAlert #ελλάδα #ελληνικά

https://www.europesays.com/uk/55149/ New Gmail Feature Leaves Millions Of Email Users Open To Attack #Cybercrime #EmailScam #EmailSecurity #GmailAttack #GmailE2E #GmailEncryption #GmailScam #GmailUpdate #GmailWarning #Technology #UK #UnitedKingdom

It may be April, but don’t let cyber threats rain on your parade!

Tip of the Week: Regularly update your software and security settings to patch vulnerabilities and stop malware from blooming in your system.

Don't let the blooming flowers distract you from staying cyber safe this April!