Enterprise Cybersecurity IntelligenceLocal day

An enterprise cybersecurity intelligence company.For security and technology leaders.

Security.io
Security.io Intelligence

What changed, why it matters,
and how it evolved.

Intelligence desk

Email Security

A permanent file of Security.io’s selected briefings tagged to this executive theme. It reflects the publication’s curated coverage, not a census of all global activity.

2026-11-02Arara breach expands from one mail system to 97 client serversSupply Chain
2026-10-19Cisco email gateway exploitation reaches root through crafted attachmentsEmail Security
2026-10-16Cisco email gateway exploitation demands cluster-level compromise checksEmail Security
2026-10-15Microsoft disrupts the service market behind a billion malicious messagesEmail Security
2026-10-06Exchange V2 release adds privilege-escalation fix ahead of scheduleVulnerability Management
2026-10-05FortiMail zero-day reaches Monday as a compromise investigationVulnerability Management
2026-10-02FortiMail zero-day is being exploited while fixed builds remain unavailableEmail Security
2026-09-30Phishing campaign turns two legitimate RMM tools into redundant accessEndpoint Security
2026-09-24EvilTokens disruption exposes a faster device-code phishing-to-fraud cycleIdentity
2026-09-23EvilTokens disruption opens a narrow window for identity clean-upIdentity
2026-09-16Cisco email-gateway zero-day gives attackers root through email parsingEmail Security
2026-09-15Active exploitation reaches root through Cisco email gatewaysEmail Security
2026-09-14Brevo SSO boundary failure turned Trezor email into a phishing channelThird-Party Risk
2026-09-04ASCII smuggling moves from prompt injection into phishing evasionEmail Security
2026-09-02Fake coding tests turn developer hiring into an espionage pathEndpoint Security
2026-08-26Separate Zimbra campaigns converge on mailbox and identity riskEmail Security
2026-08-20Mirage2FA telemetry reframes Microsoft 365 MFA as a session-containment problemIdentity
2026-07-30OWAReaper persistence survives credential rotation and endpoint rebuildingThreat Intelligence
2026-07-24Laundry Bear’s Zimbra campaign turns a viewed email into mailbox persistenceThreat Intelligence and Identity
2026-07-16Fraud disruption reveals the infrastructure behind the scamLaw enforcement