--- title: "AI Email Threat, Sextortion Email Surge, Experian Fined by the US Regulator $650K Over Sales emails, Cybersecurity News [ August 21, 2023] | DuoCircle" description: "Follow this article to stay informed on how malicious actors execute new-age email scams, including AI-driven attacks." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-34-of-2023/" --- Quick Answer Email security headlines for the week of August 21, 2023\. A Perception Point survey of more than 300 enterprises found 91.1% had encountered AI-generated email attacks and around 80% expect attackers to keep using AI to bypass current defenses. Vade reported sextortion emails grew 178% to become the third most common email-based threat. Researchers warned that some Barracuda Email Security Gateway appliances remain vulnerable to CVE-2023-2868 even after Barracuda's patch, with the FBI urging full hardware replacement. The CFPB fined credit bureau Experian $650,000 for sending marketing emails to consumers who had opted out of commercial messaging through its consumer credit-monitoring portal. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2023%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=AI%20Email%20Threat%2C%20Sextortion%20Email%20Surge%2C%20Experian%20Fined%20by%20the%20US%20Regulator%20%24650K%20Over%20Sales%20emails%2C%20Cybersecurity%20News%20%5B%20August%2021%2C%202023%5D&url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2023%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2023%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2023%2F&title=AI%20Email%20Threat%2C%20Sextortion%20Email%20Surge%2C%20Experian%20Fined%20by%20the%20US%20Regulator%20%24650K%20Over%20Sales%20emails%2C%20Cybersecurity%20News%20%5B%20August%2021%2C%202023%5D "Share on Reddit") [ ](mailto:?subject=AI%20Email%20Threat%2C%20Sextortion%20Email%20Surge%2C%20Experian%20Fined%20by%20the%20US%20Regulator%20%24650K%20Over%20Sales%20emails%2C%20Cybersecurity%20News%20%5B%20August%2021%2C%202023%5D&body=Check out this article: undefined%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2023%2F "Share via Email") ![cybersecurity](https://media.mailhop.org/duocircle/images/2023/09/email-smtp-service.jpg) _Follow this article to stay informed on how malicious actors execute **new-age**_ **_email scams_**_, including AI-driven attacks_. _Use this information to strengthen your [cybersecurity](/) defenses._ ## Perception Point: AI Is the Future of Email Attacks, Businesses Fear Impact [9 of 10 businesses](https://www.msspalert.com/news/ai-will-dominate-email-attacks-organizations-fear-impact-new-report-says) reported encountering artificial intelligence (AI) based email cyberattacks. Additionally, eight out of ten believe threat actors will keep **using AI** to compromise existing security measures. Perception Point, a firm providing [advanced threat protection](/content/office-365-phishing-protection/office-365-advanced-threat-protection) across various digital communication channels, said the report “The Role of AI in email Security” provides critical insights on the “sudden” rise in malicious actors’ use of AI to execute **business email compromise** attacks. The report also includes the methods businesses can use to counter these modern threats. According to the study, organizations that **ranked AI as “critical”** to their email defenses increased by over four times in the past 12 months. The following are the findings from the study: - Nearly 4 out of 5 businesses ranked managing [email security](/content/email-security-services) risks among the **prominent three priorities** for their organization compared to other security and risk initiatives. - 97% of organizations have implemented AI-driven email security because their legacy systems were ineffective against AI-enabled threats. - [AI-driven email security](/email-security/how-ai-powered-email-solutions-can-level-up-security-teams/) buyers also want to protect other collaboration and communication apps better, like Microsoft Teams, OneDrive, Zoom, SharePoint, Slack, and Salesforce, with AI. [![AI cyberattacks](https://media.mailhop.org/duocircle/images/2023/09/email-smtp-serivce-1.jpg)](https://media.mailhop.org/duocircle/images/2023/09/email-smtp-serivce-1.jpg) ## Sextortion Emails Increase by 178% to Become the Third Top Email Threat An ESET study has revealed that sextortion scams via email have [increased by 178%](https://www.infosecurity-magazine.com/news/sextortion-scams-surge-178-in-a/) in the first half of 2023 compared to the same period last year. Thus, sextortion has risen to the **third level** among top email-based threats. The scam involves [threat actors](/email-security/russian-state-sponsored-threats-evolving-tactics-to-target-uk-us-and-europe/) sending emails to prospective victims claiming that the former possessed explicit images or videos of the recipient. They ask for money so they won’t post sensitive content online. _However, as per ESET, the **threats are hollow**; malicious actors sending the emails do not often have any private media of the recipients with them_. That said, a more severe form of the scam must be expected wherein threat actors can use [deepfake technology](https://www.techslang.com/what-is-deepfake-technology/) to create **fake explicit content** of people to use for sextortion. As per the FBI, such content will be difficult to remove from the internet once it starts circulating online. ## Barracuda’s Email Appliances Still Vulnerable Despite Patch A recent FBI warning states that Barracuda’s Email Security Gateway (ESG) appliances remain [vulnerable to threats](https://thehackernews.com/2023/08/urgent-fbi-warning-barracuda-email.html) from suspected Chinese malicious actors despite a recent patch. The threat had been first active since October 2022, exploiting a [zero-day vulnerability](/email-security/unpatched-dogwalk-a-new-microsoft-zero-day-vulnerability/) labeled **CVE-2023-2868** that provided adversaries with privileges on ESG appliances, potentially affecting many customers using the device. The flaw stayed undetected until it was recently discovered and patched. However, the new finding says that the threat actors, named UNC4841 by Google Mandiant, still use the flaw to infiltrate the affected [ESG appliances](https://thehackernews.com/2023/06/barracuda-urges-immediate-replacement.html). The **remote command injection flaw** appears in ESG appliances with versions from 5.1.3.001 to 9.2.0.006 and gives threat actors **administrator privileges** to execute system commands remotely. As per Barracuda, a specific notification helps customers identify the flawed appliances. Barracuda urges customers using affected ESG appliances to **contact Barracuda for a** **free replacement**. [![ email security ](https://media.mailhop.org/duocircle/images/2023/09/spf-record-check-7509.jpg)](https://media.mailhop.org/duocircle/images/2023/09/spf-record-check-7509.jpg) ## Experian Fined by the US Regulator $650K Over Sales emails The Federal Trade Commission has slapped a [fine of $650,000](https://cybernews.com/news/experian-fined-over-sales-emails/) on Experian Consumer Services and imposed an injunction for sending **unsolicited emails to its customers**. The impacted users had created free Experian accounts for third-party access to their credit reports. The emails asked users to confirm if a car that Experian had linked with the victim’s account was theirs, **offering a free service** to boost the user’s credit score and advertising a free [dark web scan](https://gizmodo.com/google-io-about-image-dark-web-scan-play-store-passkeys-1850425119). > The US Department of Justice (DoJ) said, “The emails did not offer the recipients any opt-out mechanism if they did not want to receive such emails in the future.” It added, “According to the complaint, the emails implied that they had **customers’ crucial information**, even if it was commercial.” After receiving several **consumer complaints** that these emails did not offer any [opt-out mechanism](https://www.digitaleurope.org/news/joint-statement-health-organisations-define-ehds-opt-out-required-for-life-saving-research/), the government swung into action. ## Topics NewsSecurityUpdates ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2023%2F) [ ](https://twitter.com/intent/tweet?text=AI%20Email%20Threat%2C%20Sextortion%20Email%20Surge%2C%20Experian%20Fined%20by%20the%20US%20Regulator%20%24650K%20Over%20Sales%20emails%2C%20Cybersecurity%20News%20%5B%20August%2021%2C%202023%5D&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2023%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fannouncements%2Fcyber-security-news-update-week-34-of-2023%2F) Copy Related Articles - [ ![spam](https://media.mailhop.org/duocircle/images/2021/07/sender-policy-framework-7535.jpg) Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam News ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/) - [ ![Cyber Security](https://media.mailhop.org/duocircle/images/2022/01/spf-flattening-7011.jpg) Cyber Security News Update, Week 1 of 2022 News ](/blog/announcements/cyber-security-news-update-week-1-of-2022/) - [ ![Cybersecurity](https://media.mailhop.org/duocircle/images/2023/01/spf-validator-6824.jpg) Cybersecurity News Update, Week 1 of 2023 News ](/blog/announcements/cyber-security-news-update-week-1-of-2023/) - [ ![cybersecurity](https://media.mailhop.org/duocircle/images/2024/01/phishing-protection.jpg) EasyPark Data Breach, Ohio Lottery Cyberattack, GTA 5 Leak, Cybersecurity News \[December 25, 2023\] News ](/blog/announcements/cyber-security-news-update-week-1-of-2024/) ## Related Articles [ News 3m Alert: Fix SPF & DKIM Settings For Your Email Forwarding Set Up Through Microsoft o365 SMTP Server Or Your Emails May End Up In Spam Jul 20, 2021 ](/blog/announcements/alert-fix-spf-dkim-settings-for-your-email-forwarding-set-up-through-microsoft-o365-smtp-server-or-your-emails-may-end-up-in-spam/)[ News 6m Cyber Security News Update, Week 1 of 2022 Jan 7, 2022 ](/blog/announcements/cyber-security-news-update-week-1-of-2022/)[ News 7m Cybersecurity News Update, Week 1 of 2023 Jan 1, 2023 ](/blog/announcements/cyber-security-news-update-week-1-of-2023/)[ News 5m EasyPark Data Breach, Ohio Lottery Cyberattack, GTA 5 Leak, Cybersecurity News \[December 25, 2023\] Jan 4, 2024 ](/blog/announcements/cyber-security-news-update-week-1-of-2024/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"AI Email Threat, Sextortion Email Surge, Experian Fined by the US Regulator $650K Over Sales emails, Cybersecurity News [ August 21, 2023]","description":"Follow this article to stay informed on how malicious actors execute new-age email scams, including AI-driven attacks.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-34-of-2023/","datePublished":"2023-09-01T18:28:15.000Z","dateModified":"2025-05-20T11:13:35.000Z","dateCreated":"2023-09-01T18:28:15.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-34-of-2023/"},"articleSection":"announcements","keywords":"News, Security, Updates","wordCount":683,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2023/09/email-smtp-service.jpg","caption":"cybersecurity","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"News"},{"@type":"ListItem","position":3,"name":"AI Email Threat, Sextortion Email Surge, Experian Fined by the US Regulator $650K Over Sales emails, Cybersecurity News [ August 21, 2023]","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-34-of-2023/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"News","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"AI Email Threat, Sextortion Email Surge, Experian Fined by the US Regulator $650K Over Sales emails, Cybersecurity News [ August 21, 2023]","item":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-34-of-2023/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"AI Email Threat, Sextortion Email Surge, Experian Fined by the US Regulator $650K Over Sales emails, Cybersecurity News [ August 21, 2023]","description":"Follow this article to stay informed on how malicious actors execute new-age email scams, including AI-driven attacks.","url":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-34-of-2023/","datePublished":"2023-09-01T18:28:15.000Z","dateModified":"2025-05-20T11:13:35.000Z","dateCreated":"2023-09-01T18:28:15.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/announcements/cyber-security-news-update-week-34-of-2023/"},"articleSection":"announcements","keywords":"News, Security, Updates","wordCount":683,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2023/09/email-smtp-service.jpg","caption":"cybersecurity","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```