Barracuda Networks has released patches for two vulnerabilities, CVE-2026-116606 and CVE-2026-111560, affecting its Email Security Gateway and several other products including its Load Balancer ADC, Message Archiver, WAF Control Center, Web Application Firewall, and Web Security Gateway. Chained together, the flaws could let an attacker with access to a device's administrative interface bypass authorization controls and gain root access.
bleepingcomputer.com
· 2026-11-03
A new explainer outlines the different layers of email encryption, noting they guard against distinct threats such as account compromise, network eavesdropping, data breaches and physical theft. It emphasizes that connection-level encryption (TLS) protects data in transit between a device and an email provider, while other threats like phishing or accidental deletion require different safeguards.
fastmail.com
· 2026-10-30
Arctic Wolf has documented a social-engineering campaign affecting more than 400 incidents in which attackers flood employees' inboxes with mail-bomb spam, then contact them via Microsoft Teams' external chat feature posing as IT support. Victims are talked into granting remote access through tools like Quick Assist or AnyDesk, after which attackers move from recon to credential theft, lateral movement and payload execution in under 15 minutes.
darkreading.com
· 2026-10-27
Cybersecurity firm Huntress published its 'Tragic Quadrant,' a ranked list of attack tactics most frequently hitting small and mid-sized businesses. The data shows remote monitoring and management (RMM) tool abuse accounted for 45% of endpoint incidents in Q1 2026, mailbox manipulation made up 24.6% of identity threat signals so far in 2026, and adversary-in-the-middle attacks that bypass multi-factor authentication represented 18.9% of identity-based threats tracked in 2025.
bleepingcomputer.com
· 2026-10-27
The Free Software Foundation is holding a free two-hour 'EncryptFest' event from 13:00-15:00 EDT, covering encryption and privacy topics. The agenda includes a discussion on bulk surveillance, a video from cryptographer Bruce Schneier, a talk with Techlore founder Henry Fisher, and a hands-on email encryption workshop. Attendees can join online or in person at locations in Boston and New Haven, with registration requested in advance.
news.slashdot.org
· 2026-10-25
DreamHost is requiring affected account owners to reset passwords following a service disruption affecting its web, email and file hosting systems. The company has been emailing step-by-step reset instructions in batches, but says users don't need to wait and can reset passwords directly via the DreamHost control panel. Its File Manager tool remains offline as the issue is worked on, and a previous panel error preventing some email password changes has been fixed.
dreamhoststatus.com
· 2026-10-25
A Cybersecurity Awareness Week report explains that while Apple's App Tracking Transparency, Hide My Email, and iCloud Private Relay limit future tracking, they do not remove personal information already collected by data brokers over the years. It details how brokers compile sensitive details like addresses, phone numbers, and family connections from app and website permissions, then resell them largely without regulation.
9to5mac.com
· 2026-10-24
A security researcher reported that attackers compromised a Tor management server in late August using a reused password, then installed the Ebury Linux backdoor and gained control of a second server called Switzerland2. From there they reconfigured 333 exit relays between October 2 and 5 to redirect SSH traffic to attacker-controlled servers and block ports used for encrypted email while leaving unencrypted email ports open.
arstechnica.com
· 2026-10-22
Interpol coordinated law enforcement from 21 countries and private cybersecurity firms including Team Cymru, Kaspersky, Group-IB, and Fortinet in Operation Serengeti III, running from June 29 to August 31. The effort led to 1,462 arrests, the dismantling of 10,909 malicious networks, and recovery of over $105 million in illicit funds, while identifying nearly 66,000 victims with estimated losses exceeding $385 million. Notable actions included fraud ring takedowns in Uganda, illegal crypto-mining seizures in Angola, and a phishing arrest in Nigeria tied to 2.1 million harvested email addresses.
bleepingcomputer.com
· 2026-10-22
Optiv has introduced CyberBOT, a free cybersecurity education program aimed at classrooms, nonprofits and community organizations. The program consists of five interactive sessions covering threat actors, email security, password practices, social media privacy and mobile device protection, built around hands-on activities like games, posters and group exercises.
darkreading.com
· 2026-10-21
A developer released a task-management tool on Show HN that lets users dump an unstructured list of tasks by typing or speaking, after which the system selects three priority items and explains its reasoning via email. The tool processes voice input locally in the browser and only sends typed task text externally for ranking if the user signs up.
3anddoneapp.com
· 2026-10-19
Security firm Sublime has reported a surge in phishing attacks delivered via calendar invitations (ICS files) rather than traditional email, warning that such invites can bypass spam filters even when the accompanying email is blocked. The scams typically mimic legitimate meeting invites or payment notices, directing victims to fake login pages or malware disguised as Microsoft, Google, or PayPal services. Sublime says ICS phishing incidents rose roughly 33,000% between May and September, with attacks doubling or tripling month over month.
techspot.com
· 2026-10-17
GoKawiil