[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:email-authentication":3},{"control":4,"products":25,"stories":56,"lessons":100,"related":125,"compare":146},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"email-authentication","Email authentication (DMARC)","Nobody can send email that pretends to come from your domain.","Publishing SPF, DKIM and an enforced DMARC policy, and monitoring the reports, so receiving mail servers reject messages that spoof your domain.","Email spoofing your own domain is used to defraud your customers and suppliers, and it damages trust in your brand. The large mailbox providers now require DMARC from bulk senders. Enforcement is mostly a configuration project; the tools help you find every legitimate sender first, so nothing breaks.",[11,12,13,14],"Will it get us to p=reject without blocking our own legitimate mail?","Does it identify every service that sends mail as our domain?","Does it cover all our domains, including parked ones?","Does it support BIMI and MTA-STS?","Risk: criminals send fraudulent email in our name to customers and suppliers. Control: SPF, DKIM and DMARC at p=reject on all domains. Owner: IT operations lead. Measure: domains at DMARC enforcement.",[17,18,19,20],"NIS2 Art. 21(2)(g): basic cyber hygiene","DORA Art. 9: protection and prevention","CIS Control 9.5: implement DMARC","ISO\u002FIEC 27001:2022 A.8.21: security of network services",{"name":22,"slug":23},"Configuration Management","configuration-management","2026-10-16T12:48:12.120006+00:00",[26,32,40,48],{"vendor_slug":27,"vendor_name":27,"vendor_logo":28,"product_slug":29,"product_name":27,"url":30,"description":31},"dmarcian","\u002Fvendor-logos\u002Fdmarcian.png","dmarcian-platform","https:\u002F\u002Fdmarcian.com\u002F","DMARC report processing and guidance for moving domains to enforcement.",{"vendor_slug":33,"vendor_name":34,"vendor_logo":35,"product_slug":36,"product_name":37,"url":38,"description":39},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","email-fraud-defense","Proofpoint Email Fraud Defense","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-fraud-defense","DMARC deployment and monitoring with hosted SPF and DKIM services.",{"vendor_slug":41,"vendor_name":42,"vendor_logo":43,"product_slug":44,"product_name":45,"url":46,"description":47},"red-sift","Red Sift","\u002Fvendor-logos\u002Fred-sift.png","ondmarc","Red Sift OnDMARC","https:\u002F\u002Fredsift.com\u002Fpulse-platform\u002Fondmarc","Guided DMARC deployment and monitoring, with support for BIMI and MTA-STS.",{"vendor_slug":49,"vendor_name":50,"vendor_logo":51,"product_slug":52,"product_name":53,"url":54,"description":55},"valimail","Valimail","\u002Fvendor-logos\u002Fvalimail.png","valimail-enforce","Valimail Enforce","https:\u002F\u002Fwww.valimail.com\u002Fproducts\u002Fenforce\u002F","Automated DMARC enforcement with discovery of every service that sends mail as your domain.",{"total":57,"last_days":58,"recent":59},86,39,[60,65,70,75,80,85,90,95],{"slug":61,"title":62,"published_at":63,"brief":64},"city-of-osaka-warns-of-data-breach-impacting-1-million-as-japan-reels-from-dozen-72ccdc","City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents","2026-11-13T19:43:00+00:00","City of Osaka discloses breach affecting 1M email addresses via compromised third-party platform.",{"slug":66,"title":67,"published_at":68,"brief":69},"hijacked-email-accounts-complicate-investigations-into-european-bomb-hoaxes-e1490e","Hijacked email accounts complicate investigations into European bomb hoaxes","2026-11-12T14:45:00+00:00","Bomb threats sent to thousands of European schools originated from a compromised Taiwanese university email account.",{"slug":71,"title":72,"published_at":73,"brief":74},"sega-newsletter-data-breach-exposes-2-2-million-email-addresses-d6705a","SEGA newsletter data breach exposes 2.2 million email addresses","2026-11-09T22:09:33+00:00","SEGA reports 2.2 million email addresses exposed in third-party newsletter provider data breach.",{"slug":76,"title":77,"published_at":78,"brief":79},"outlook-com-bounces-legit-emails-as-microsoft-s-authentication-crackdown-goes-si-d941be","Outlook.com bounces legit emails as Microsoft's authentication crackdown goes sideways","2026-11-09T13:30:00+00:00","Microsoft's Outlook.com is bouncing legitimate emails due to an authentication crackdown.",{"slug":81,"title":82,"published_at":83,"brief":84},"trio-accused-of-using-deepfake-ceos-and-bogus-lawyers-to-scam-businesses-out-of-c0a75f","Trio accused of using deepfake CEOs and bogus lawyers to scam businesses out of $129 million","2026-11-09T11:47:43+00:00","Three men accused of using deepfake CEOs and lawyers to scam businesses out of $129 million.",{"slug":86,"title":87,"published_at":88,"brief":89},"3-charged-in-scheme-to-use-ai-to-impersonate-ceos-and-attorneys-to-steal-129-mil-6dfbaa","3 Charged in Scheme to Use AI to Impersonate CEOs and Attorneys to Steal $129 Million","2026-11-06T03:03:29+00:00","Three individuals indicted for using AI to impersonate CEOs and attorneys to steal $129 million.",{"slug":91,"title":92,"published_at":93,"brief":94},"us-government-email-systems-open-to-abuse-thanks-to-typos-eef857","US Government Email Systems Open to Abuse Thanks to Typos","2026-11-05T21:35:05+00:00","US government email systems vulnerable to abuse via misconfigured DNS records.",{"slug":96,"title":97,"published_at":98,"brief":99},"email-threat-landscape-q3-2026-trends-and-insights-42dccc","Email threat landscape: Q3 2026 trends and insights","2026-11-05T16:00:00+00:00","Microsoft reports a 41% surge in email phishing in September 2026, with credential theft as a primary goal.",[101,105,109,113,117,121],{"slug":102,"title":103,"published_at":104},"third-party-email-service-breach-exposes-77-million-addresses-across-400-organizations","Third-Party Email Service Breach Exposes 77 Million Addresses Across 400 Organizations","2026-11-13T20:20:22.449+00:00",{"slug":106,"title":107,"published_at":108},"hijacked-university-email-account-used-to-send-mass-bomb-hoaxes-across-europe","Hijacked University Email Account Used to Send Mass Bomb Hoaxes Across Europe","2026-11-12T15:21:00.033+00:00",{"slug":110,"title":111,"published_at":112},"microsofts-dmarcspf-crackdown-blocks-legitimate-email","Microsoft's DMARC\u002FSPF Crackdown Blocks Legitimate Email","2026-11-09T14:20:43.687+00:00",{"slug":114,"title":115,"published_at":116},"deepfake-ceo-scam-nets-129m-by-exploiting-human-trust","Deepfake CEO Scam Nets $129M by Exploiting Human Trust","2026-11-09T12:20:22.423+00:00",{"slug":118,"title":119,"published_at":120},"ai-deepfakes-used-to-impersonate-ceos-and-steal-129m-via-wire-fraud","AI Deepfakes Used to Impersonate CEOs and Steal $129M via Wire Fraud","2026-11-06T04:20:24.809+00:00",{"slug":122,"title":123,"published_at":124},"typos-and-stale-dns-records-leave-us-government-email-systems-exposed","Typos and Stale DNS Records Leave US Government Email Systems Exposed","2026-11-05T22:20:28.446+00:00",[126,130,134,138,142],{"slug":127,"name":128,"problem":129},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",{"slug":131,"name":132,"problem":133},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",{"slug":135,"name":136,"problem":137},"saas-security-posture","SaaS security posture management (SSPM)","Business apps like Microsoft 365 and Salesforce stop leaking through risky settings and connected apps.",{"slug":139,"name":140,"problem":141},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":143,"name":144,"problem":145},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",{"proofpoint\u002Femail-fraud-defense":147,"valimail\u002Fvalimail-enforce":162,"red-sift\u002Fondmarc":168,"dmarcian\u002Fdmarcian-platform":175},{"hq_country":148,"also_provides":149,"reviews":150,"affected":160,"reported":161},"US",[],[151,154,157],{"label":152,"url":153},"Gartner Peer Insights: Proofpoint Threat Protection user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fproofpoint-threat-protection",{"label":155,"url":156},"PeerSpot: Proofpoint Email Protection user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fproofpoint-email-protection-reviews",{"label":158,"url":159},"PeerSpot: Proofpoint Enterprise DLP user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fproofpoint-enterprise-dlp-reviews",0,12,{"hq_country":148,"also_provides":163,"reviews":164,"affected":160,"reported":160},[],[165],{"label":166,"url":167},"Gartner Peer Insights: Valimail Enforce user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fvalimail-enforce",{"hq_country":169,"also_provides":170,"reviews":171,"affected":160,"reported":160},"GB",[],[172],{"label":173,"url":174},"Gartner Peer Insights: Red Sift OnDMARC user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fred-sift-ondmarc",{"hq_country":148,"also_provides":176,"reviews":177,"affected":160,"reported":160},[],[]]