The National Institute of Standards and Technology (NIST) has releases its Security Publication (SP) 800-177 Revision 1, that include security guidelines and recommendations for achieving "trustworthy email".
US-CERT has published a joint Technical Alert (TA18-201A) warning of a cyber campaign involving Emotet Malware. Malicious activity was observed as recently as this month.
The NIST standard, SP 800-177 Revision 1, Trustworthy Email (Draft) was released last month and offers up-to-date security guidance to include SPF, DKIM, DMARC, and email digital signatures and encryption (via S/MIME), among others.
Office 365 phishing and account compromise attempts are on the rise. Hackers are using legitimate-looking O365 emails that instruct users to login to their account via a spoofed page after their account was supposedly suspended.
According to a new report released by Agari, 92 percent of Fortune 500 companies have not fully adopted email protections such as DMARC to prevent email attacks that impersonate corporate email domains.