Topic tag

email-security

3 articles tagged email-security. Browse the full archive or jump to all posts.

Barracuda ESG Root Without a Password: The One Check to Run This Morning

November 8, 2026 · 11 min read

Barracuda ESG Root Without a Password: The One Check to Run This Morning

watchTowr chained two Barracuda ESG bugs into root with no login. Patches are out; your check is whether the admin UI is reachable.

Read more →
364 Parked Domains Got DMARC Records. 79 of Them Were Being Spoofed.

October 11, 2026 · 15 min read

364 Parked Domains Got DMARC Records. 79 of Them Were Being Spoofed.

SH Consulting DMARC'd 364 parked domains owned by a top US real estate team. 79 came back with spoofed mail. Here is the afternoon it takes to check your own.

Read more →
A $10 domain leaked DMARC reports from 86 domains

August 15, 2026 · 13 min read

A $10 domain leaked DMARC reports from 86 domains

A researcher paid ten bucks for an expired DMARC domain and quietly received telemetry from 86 domains including Toro Company. 5-min audit + 7-day fix.

Read more →