Emotive topics such as COVID-19 and the role of policing will be at the heart of this election, and these tense issues, alongside the highly polarized nature of the electorate, ensure there will be a fertile ground for misinformation campaigns from nation state actors seeking to influence the outcome of the election. Such a phenomenon was observed recently in the so-called ‘Brexit election’ in the UK in December 2019, following which the UK government’s Intelligence and Security Committee (ISC) described Russia as a “highly capable cyber-actor.”
Speaking to Infosecurity, Seth Blank, technical committee co-chair of M3AAWG and VP of standards and new technologies at Valimail, said the issue it is looking to overcome is “a lack of clarity around well-known technical requirements.”
As cybercrime spikes in the wake of COVID-19, BEC’s toll is expected to rise this year. The Federal Bureau of Investigation (FBI) recently issued a warning to businesses on the growing threat of BEC attacks using the pandemic as a backdrop for unusual requests like payments to a “new” vendor or a change of account information.
The majority of airline companies are potentially leaving their customers vulnerable to email fraud, such as phishing, according to a new analysis by Proofpoint.
The top 20 universities based in the U.S. are failing to implement proper DMARC protections and policies, opening the door for fraudsters to spoof their email domains and convincingly impersonate them at a time when students are likely expecting to receive a wealth digital communications related to back-to-school instructions, researchers warn.
U.S. officials are ramping up criticism of Europe’s flagship privacy law, which they say protects cybercriminals.
The Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG) has put out a joint call-to-action with Google and Verizon for the security industry to take more proactive measures to authenticate and secure their sending domains and email addresses by deploying email authentication at scale.
A group of major firms, including Google, Verizon and Comcast, has formed an initiative to fight COVID-19-related spam.
Google has warned of a rise in COVID-19 threats in specific parts of the world, as cyber-criminals adapt their campaigns regionally.
In an open statement shared with Infosecurity, the Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG) made a call for further steps to be taken to “authenticate and secure sending domains and email addresses by deploying email authentication at scale and at enforcement.”
To inspect or not to inspect, that is the question.
TLS 1.3 is by far the most secure version of the Transport Layer Security (TLS) protocol, but its use of ephemeral elliptic curve keys--and the deprecation of static RSA keys--means that TLS sessions now offer forward secrecy, a bane to enterprise security administrators who want to maintain visibility into their network traffic.
200-member strong Messaging, Malware and Mobile Anti-Abuse Working Group gathers to discuss online security and privacy best-practices in the wake of attacks taking advantage of COVID-19
The latest hook? The pandemic. Since nearly every individual and organization is impacted by COVID-19, everyone is a potential target for these cyberattacks, especially those without cybersecurity experience, namely small businesses.
Every campaign plan for this cycle has changed dramatically because of COVID. In-person activities are curtailed for the foreseeable future. In their place, candidates and groups are moving to virtual town halls, virtual rallies and relying more on texting, paid media and email.
Domain-based Message Authentication, and Reporting, and Conformance is a policy that adds to SPF and DKIM and gives a receiving set of instructions on what they should do when an email they received fails other authentication checks.
Text messaging isn’t new or trendy, but it’s an increasingly popular medium for political advertisers. That was true before the coronavirus swept the country, and now texting is even more important for candidates to connect with supporters without rallies, events or canvassing teams.
Not as close as you might fear, but quantum encryption cracking is on its way. So, it's time to start getting ready for it
What lessons did you learn from the election? How will they apply ahead of November? [Absentee voting] went from five to 71 percent. It is totally amazing. Wisconsin, Michigan, Pennsylvania, North Carolina, Arizona and Florida all have no-excuse absentee voting.
Microsoft has been working closely with partners through the industry association M3AAWG to solve such limitations throughout the email ecosystem. As a result, we have decided to build and add support for DNSSEC and DANE for SMTP to Exchange Online.
Len Shneyder is co-chair of the election security working group at the Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG) where industry comes together to work against botnets, malware, spam, viruses, DoS attacks and other online exploitation to fight online abuse.