Automating SPF macro management with scripting and APIs: a step-by-step guide

ByBrad Slavin Reading Time: 4 minutes

SPF macros are placeholders used within SPF records. They dynamically dilate to specific values based on the characteristics of the email being processed, letting SPF mechanisms be more flexible and adaptive. If you have large-scale email systems, then we suggest you automate the management of SPF macros for efficient email authentication. For efficient management, consider…

Adding your SPF record to your domain provider

Adding your SPF record to your domain provider

ByBrad Slavin Reading Time: 3 minutes

To enable SPF for your domain, you need to add a DNS TXT record at your domain provider. When doing so, keep the following points in mind to ensure everything works efficiently and there are no security gaps. Add your SPF record Use your credentials to sign in to your domain host’s management console and…

How threat actors managed to send millions of phishing emails from trusted domains- explaining echo-spoofing

ByBrad Slavin Reading Time: 3 minutes

In the first half of 2024, a simple toggle in Proofpoint’s email service allowed threat actors to send millions of hard-to-detect emails impersonating blue-chip companies. They exploited a misconfiguration in Proofpoint’s secure email gateway (SEG) to send fraudulent credit card emails. These emails bypassed security filters as they were signed and verified, looking like they…

Why subdomains should not inherit the SPF policy of the parent domain?

ByBrad Slavin Reading Time: 3 minutes

It’s common for businesses to have multiple subdomains, but what about their security? While some domain owners completely ignore securing their subdomains, some subject them to the SPF policy of the parent domain. Yes, the latter is definitely better than the former, but even that doesn’t promise robust defense against phishing, spoofing, and ransomware attacks…

Spotting spoofed emails with DMARC: A guide 

Spotting spoofed emails with DMARC: A guide 

ByBrad Slavin Reading Time: 5 minutes

Here’s a harsh truth: spoofing attacks are more frequent and prevalent than you think. They are not just about someone pretending to be you by using sneaky iterations of your business name. The real issue is them capitalizing on your brand name, your credibility, and your trustworthiness to deceive others. That is, if there is…

How to configure SPF to identify valid email sources for Microsoft 365 domains?

ByBrad Slavin Reading Time: 5 minutes

SPF, which is short for Sender Policy Framework, is an email authentication protocol that allows Microsoft 365 domain owners to prevent threat actors from succeeding in deceiving recipients by sending phishing and spoofing emails from your domain. With SPF in place, emails sent by only officially authorized IP addresses and servers linked to your domain…

4 ChatGPT and AI-based scams to be wary of in the second half of 2024

ByBrad Slavin Reading Time: 4 minutes

We are more than halfway down in 2024, and the number of AI-based scams is not looking like it’s in the mood for dwindling anytime soon. Since the launch of ChatGPT in November 2022, AI-based threats have grown, especially in their speed, volume, and sophistication. In fact, the Q4 of 2022 saw an increase of…

SPF for multi-domain environments: challenges and solutions

SPF for multi-domain environments: challenges and solutions

ByBrad Slavin Reading Time: 4 minutes

Most large-scale businesses own multiple domains and subdomains, which are heavily used for sending emails. A multi-domain environment is more prone to email-based cyber threats. In fact, in a recent attack, malicious actors compromised more than 8,000 subdomains of top brands and institutions, including MSN, VMware, McAfee, The Economist, eBay, etc.  While using multiple domains…

Is the Microsoft Account Security Alert email a scam? How to differentiate between a genuine and fake alert email 

ByBrad Slavin Reading Time: 5 minutes

Have you been receiving security alert emails from Microsoft lately? Well, you are not alone! If, like most people, you are also concerned about the validity of such alerts, your apprehension is justified. Considering that all your email is the treasure trove for all the important and sensitive information, receiving a security alert from Microsoft…

Threat actors are exploiting multiple SMTP servers and bypassing SPF, DKIM, and DMARC authentication

ByBrad Slavin Reading Time: 3 minutes

Cybersecurity works only if there are no vulnerabilities in the tools and protocols themselves. However, experts have recently found security loopholes in multiple hosted, outbound SMTP servers. These vulnerabilities allow authenticated email senders and some trusted networks to send emails with spoofed sender information. What this means, in simpler words, is that despite having email…