Email Security
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.
Hi, what are you looking for?
SecurityWeek
Email Security
Microsoft is trying different ways to identify the cause of the problem and get its servers back online, using “a measured approach to identify...
Email Security
The security defects could allow attackers to bypass authorization and gain root access to devices.
Email Security
An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances.
Email Security
Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges.
Email Security
An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.
Data Breaches
Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and CoinTracking.
Cybercrime
Researchers demonstrate how attackers could abuse built-in email chatbots to evade detection, impersonate trusted employees, compromise executive accounts, and facilitate financial fraud.
Cybersecurity Funding
The company has raised a total of $49 million in funding, including from Battery Ventures, Accel and Foundation Capital.
Cybersecurity Funding
The startup will use the fresh investment to accelerate its go-to-market strategy and to expand its platform.
Email Security
The flaw results in malicious code embedded in crafted emails being executed when the emails are opened.
Email Security
Join the webinar as we break down why email-layer defenses alone can’t keep pace with the modern phishing ecosystem.
Cybersecurity Funding
The company has developed a platform that uses specialized AI agents to inspect every incoming message.
Email Security
Microsoft has shared mitigations for CVE-2026-42897 until a permanent patch can be released for affected Exchange Server versions.
Email Security
CVE-2026-40361 is similar to a vulnerability found a decade ago, BadWinmail, which at the time was dubbed an “enterprise killer”.
Email Security
The threat actor infected victims with the Snow malware family – Snowbelt, Snowglaze, and Snowbasin – for persistent access.
Email Security
New analysis from Abnormal AI reveals how attackers have abandoned technical exploits to weaponize routine workflows and internal trust.
Data Protection
The feature allows enterprise users to compose and read end-to-end encrypted messages natively on their mobile devices.
Email Security
The agency said Iranian hackers targeted the director’s personal email account and noted that the compromised information is old.
Email Security
Patched in December 2025, the exploited flaw leads to XSS attacks via the animate tags in SVG documents.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Overreliance on AI could erode the creativity, clear communication, and critical thinking security teams need when there’s no playbook.
(Joshua Goldfarb)
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)