I configured an Exchange Online mail flow rule to prevent automatic forwarding outside the organization, but some users already enabled forwarding directly in their mailbox settings. Will the…
Has anyone else seen legitimate DocuSign messages trigger highly malicious link alerts in a GCC tenant? We are seeing this across many incoming messages, including mail sent through…
Has anyone else seen legitimate DocuSign messages trigger Microsoft Exchange or email-security alerts for highly malicious links, particularly in GCC environments? This appears to be happening broadly across…
We're a Google Workspace organization with more than 600 users, currently relying on Gmail's built-in email protection. The quarantine and message-management experience has been frustrating, so we're comparing…
I received a strange job invitation claiming to be from Bolt. It came from [email protected], and the email headers showed that SPF, DKIM, and DMARC passed. The Received…
Over the past couple of weeks, we've seen several legitimate messages rejected because DMARC verification failed. In roughly 20 years of handling email, I've only encountered this once…
I received an oddly formatted email claiming that I need to re-attest my network access for Microsoft's Smart Network Data Services (SNDS). The message passed SPF and DKIM,…
I received an unusually formatted email claiming that I need to re-attest our network access for Microsoft's Smart Network Data Services (SNDS). The message passed SPF and DKIM,…
Over the past couple of weeks, we've had about five legitimate messages from different companies rejected because they failed DMARC verification. In roughly 20 years of handling email,…
Two users in our organization have been receiving more than 100 phishing, newsletter, and spam messages per day, often in different languages. The attack started about three weeks…
Our policy doesn't allow company email accounts to be accessed from personal phones, but we need some external contractors—particularly overseas contractors—to receive operational alerts. What's the most secure…
For those who have handled business email compromise incidents, how was the attack detected? Did authentication or email-security tools flag unusual activity, or did the messages and sign-ins…
Our organization does not allow company email to be accessed from personal phones, but some external contractors—particularly overseas contractors—need to receive operational alerts. We want to avoid making…
Sharing links to Teams folders and files by email is extremely convenient and helps people work efficiently. The downside is that it can train users to click links…
Linking directly to files and folders in Teams is convenient and helps people work efficiently, but it can also train users to click links in email without thinking.…
What limits has your organization configured for outbound email, especially external recipients per hour, internal recipients per hour, and total recipients per day? A commonly suggested baseline is…
I noticed an email dated August 29 in one of my secondary Google accounts claiming that malware on my Mac or other Windows computers may be stealing my…
We've received around a dozen TikTok Shop account verification emails sent to current and former employees, and I also received one at a personal address. The messages appear…
I'm evaluating Abnormal against keeping a traditional mail gateway. We're moving away from relying on Microsoft Defender alone because of repeated misses, especially business email compromise and no-payload…
Our company is being impersonated in a mass-email campaign. Several businesses—some existing clients and some we have never worked with—have received messages claiming to be from us and…