Understanding the concept of fallback mechanisms in Sender Policy Framework

Understanding the concept of fallback mechanisms in Sender Policy Framework

Understanding the concept of fallback mechanisms in Sender Policy Framework

by DuoCircle

 

Sometimes, when an email doesn’t pass the SPF authentication checks, the receiving server or policies offer better ways to handle or mitigate the failure. This is done using fallback mechanisms— a way to secure email communication without hampering the flow and productivity (more…)

Yahoo Japan has mandated DMARC and domain authentication

Yahoo Japan has mandated DMARC and domain authentication

 

In November 2023, Yahoo announced that by February 1st, 2024, any company that sends more than 5,000 emails per day has to deploy DMARC to minimize the risk of email-based spoofing, phishing, and ransomware. After this announcement, the rate of DMARC adoption surged, and now Yahoo Japan has also made DMARC and domain authentication mandatory for users as of December 2024. Experts see this as a great opportunity to improve companies’ email security posture. (more…)

Is your DMARC enforcement strict enough?

Is your DMARC enforcement strict enough?

 

Back in 2024, email service providers such as Google and Yahoo rolled out new email-sending policies. One would have thought that organizations would begin to take email security more seriously, but so far, that hasn’t been the case. In fact, cybersecurity experts have found that phishing attacks have shot up, with the number of phishing messages increasing by 202% in the second half of 2024.

(more…)

New PhishWP Threat, Illicit Marketplace Live, Codefinger Targets AWS – Cybersecurity News [January 13, 2025]

New PhishWP Threat, Illicit Marketplace Live, Codefinger Targets AWS – Cybersecurity News [January 13, 2025]

New PhishWP Threat, Illicit Marketplace Live, Codefinger Targets AWS – Cybersecurity News [January 13, 2025]

by DuoCircle

 

Cybercriminals are enhancing their capabilities, as evidenced by the latest PhishPWP phishing threat. Similarly, this week’s cybersecurity bulletin highlights the latest ransomware attack on AWS servers, making recovery impossible without the attacker’s key. We also look at how cybercriminals use popular social media channels like Telegram. Zero-day attacks are the most dangerous of all, as they emerge from practically nowhere. This week’s news highlights one such attack on Fortinet FortiGate firewall users. Finally, we round off a reputed university shutting off classes, fearing a cyber-attack on its network.    

(more…)

Gmail security requirements for brands and businesses

Gmail security requirements for brands and businesses

 

Gmail is one of the best email service providers in the world. Gmail has managed to beat all the competition because of its state-of-the-art features and seamless integration with other Google services. With a whopping user base of 1.8 billion, Gmail focuses extensively on security requirements and restrictions in order to enhance user safety and data privacy.

(more…)

Implementing DKIM the right way: A guide for ESPs

Implementing DKIM the right way: A guide for ESPs

 

You might have heard that email authentication protocols are only for businesses, but that’s not entirely true! 

Don’t you think email security is crucial for everyone, including businesses that send email campaigns and email service providers (ESPs) that facilitate them? If so, you can agree with us when we say that email authentication is a must for every entity in the email ecosystem, including the ESPs. 

(more…)

Enforcement rules for DMARC for optimum protection against phishing and spoofing

Enforcement rules for DMARC for optimum protection against phishing and spoofing

Enforcement rules for DMARC for optimum protection against phishing and spoofing

by DuoCircle

 

Just like SPF offers domain owners the choice between Softfail and Hardfail, DMARC has three enforcement rules: none, quarantine, and reject. Each has its own significance and relevance in the DMARC compliance journey. 

(more…)

Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge – Cybersecurity News [January 06, 2025]

Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge – Cybersecurity News [January 06, 2025]

Microsoft Alerts Millions, War Expands Globally, Salt Typhoon Surge – Cybersecurity News [January 06, 2025]

by DuoCircle

 

Ensuring proper cybersecurity is at the top of every organization’s agenda this year. That explains why Microsoft cautions its Windows 10 users and asks them to upgrade their PC’s OS before the 14 October 2025 deadline. However, even the most robust cybersecurity strategies might seem inadequate, especially as three more telecoms become victims of the Salt Typhoon.

(more…)

Understanding everything about DMARC records and tags

Understanding everything about DMARC records and tags

 

Email security is a growing concern for businesses and individuals alike. Increased email spoofing and phishing attempts have made it crucial to implement security measures to safeguard communication channels. One such powerful tool to protect email communications is DMARC or Domain-based Message Authentication Reporting and Conformance. Its job is to authenticate email messages and take suitable action against unauthorized emails. The DMARC policy works in coordination with SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail)  protocols.

(more…)

Pin It on Pinterest