Outlook CSS techniques can spoof Microsoft sign-in and capture passwords, while Gmail image-set() can trigger external ...

The "external sender" warnings shown to email recipients by clients like Microsoft Outlook can be hidden by the sender, as demonstrated by a researcher. Turns out, all it takes for attackers to alter ...

In my last article, a reader asked what may have caused his emails to render with no text or graphics whatsoever. Kal Hadi of WhittmanHart suggested a solution that included the use of Cascading Style ...

Black Hat USA 2026 – Las Vegas – Using email platforms to target users is nothing new in the world of threat actors. Nor is it revolutionary for defenders who've shored up guardrails when it comes to ...

A phishing campaign using Office 365 voicemail lures to trick them into visiting landing pages designed to steal their personal information or infect their computers with malware. The phishing emails ...

New research shows that up to a half of all HTML email attachments are malicious, and not just because of a few massive campaigns. Researchers warn that attackers are relying more on malicious HTML ...