Communications Security

Communications Security | News, how-tos, features, reviews, and videos

GitLab issue email’s only security is obscurity

A long-lived token embedded in GitLab’s issue-creating email address means anyone with the address, not just the project owner, can push code and trigger CI/CD jobs subject to the account’s existing permissions.

By Shweta Sharma

Sep 25, 20265 mins

Code SecurityCommunications SecurityEmail Security

Microsoft says you don’t need another email security tool; experts say, not so fast

By Taryn Plumb

Jun 16, 20266 mins

Communications SecurityEmail SecurityNetwork Security

Warrantless wiretaps cut off for a week following US Congress vote

By Maxwell Cooter

Jun 12, 20262 mins

Communications SecurityGovernmentMarkets

French government's secure messaging system breached

By Maxwell Cooter

Jun 12, 20262 mins

Communications SecurityMessaging SecuritySocial Engineering

Aged-domain acquisition: The tradecraft phishing operators are using to bypass your mail filter's reputation score

By Yanky Wilson

Jun 11, 20267 mins

Communications SecurityEmail SecurityPhishing

Certifiably random: Swiss researchers claim perfect random number source

By Maxwell Cooter

May 29, 20262 mins

Communications SecurityData and Information SecurityEncryption

Articles

Exchange Server zero-day vulnerability can be triggered by opening a malicious email

Already being exploited, this is a ‘mitigate right now’ emergency, says one expert.

By Howard Solomon

May 15, 2026 6 mins

Communications SecurityEmail SecurityZero-Day Vulnerabilities

Google adds end-to-end Gmail encryption to Android, iOS devices for enterprises

It's a valuable addition for organizations with compliance or privacy concerns, but to use the feature, customers must subscribe to the Enterprise Plus with Assured Controls edition of Premium Workspace.

By Howard Solomon

Apr 10, 2026 5 mins

Communications SecurityEmail SecurityEncryption

FBI wiretap system tapped by hackers

A system used to manage wiretaps is reportedly being investigated following suspicious activities.

By Maxwell Cooter

Mar 6, 2026 2 mins

Communications SecurityGovernmentGovernment IT

‘Dead’ Outlook add-in hijacked to phish 4,000 Microsoft Office Store users

The first ever known malicious add-in bypassed a weak vetting process with a simple URL hack.

By John E. Dunn

Feb 12, 2026 4 mins

Communications SecurityEmail SecurityPhishing

What does business email compromise look like?

When attackers target trust instead of technology, organizations must respond with verification habits and empowered staff.

By Huntress

Feb 24, 2026 7 mins

Communications SecurityEmail SecurityNetwork Security

Microsoft releases second out-of-band fix for Windows in a week

January’s Patch Tuesday updates caused several serious issues, calling Microsoft’s quality control into question.

By Maxwell Cooter

Jan 26, 2026 2 mins

Communications SecurityEmail SecurityWindows Security

7 top cybersecurity projects for 2026

A new year brings both fresh and long-standing cyber challenges. The following innovative projects that CISOs are undertaking this year might be worth adding to your own 2026 planning list.

By John Edwards

Jan 19, 2026 7 mins

Email SecuritySecurity Operations CenterThreat and Vulnerability Management

Cisco finally patches seven-week-old zero-day flaw in Secure Email Gateway products

Chinese hackers are behind attacks on AsyncOS Software that allow complete takeover of the appliance, the company says.

By John E. Dunn

Jan 16, 2026 4 mins

Communications SecurityEmail SecurityNetwork Security

WhatsApp accounts targeted in ‘GhostPairing’ attack

A new attack abusing a legitimate device pairing feature of the app could be used to penetrate employee WhatsApp Groups.

By John E. Dunn

Dec 18, 2025 4 mins

Communications SecurityMessaging SecurityMobile Security

WhatsApp flaw allowed discovery of the 3.5 billion mobile numbers registered to the platform

Meta slow to respond when rate-limiting weakness was reported to them, said researchers.

By John E. Dunn

Nov 19, 2025 5 mins

Communications SecurityMessaging SecurityNetwork Security

GitLab issue email’s only security is obscurity

Critical Cisco Secure Email Gateway zero-day gives attackers root access

Tycoon2FA takedown reshapes the phishing landscape

EU extends mass scanning of messages without a warrant

Microsoft says you don’t need another email security tool; experts say, not so fast

Warrantless wiretaps cut off for a week following US Congress vote

French government's secure messaging system breached

Aged-domain acquisition: The tradecraft phishing operators are using to bypass your mail filter's reputation score

Certifiably random: Swiss researchers claim perfect random number source

Articles

Exchange Server zero-day vulnerability can be triggered by opening a malicious email

Google adds end-to-end Gmail encryption to Android, iOS devices for enterprises

FBI wiretap system tapped by hackers

‘Dead’ Outlook add-in hijacked to phish 4,000 Microsoft Office Store users

What does business email compromise look like?

Microsoft releases second out-of-band fix for Windows in a week

7 top cybersecurity projects for 2026

Cisco finally patches seven-week-old zero-day flaw in Secure Email Gateway products

WhatsApp accounts targeted in ‘GhostPairing’ attack

WhatsApp flaw allowed discovery of the 3.5 billion mobile numbers registered to the platform

Resources

Managing modern identity complexity and reducing executive risk

The new era of executive risk: Why identity security must be continuous

5 identity security questions CISOs must be ready to answer