
Microsoft consumer mail rejects legitimate messages lacking DMARC
Bounces citing 550 5.7.1 or 550 5.7.23 began November 5 and also hit small senders.
8 stories, newest first · one card per story

Bounces citing 550 5.7.1 or 550 5.7.23 began November 5 and also hit small senders.

Attackers put phone-support lures in order fields so authenticated retailer mail urged victims to call attacker numbers.

Cisco Talos saw about 1,400 Dell and Staples messages that planted callback numbers in order fields.

Cisco Talos saw about 1,400 messages whose DKIM and DMARC checks passed while pushing victims to call.
Customers can add VMCs or CMCs so supported inboxes display verified logos alongside DMARC controls.

Two patched Apple iCloud SMTP parsing flaws let free accounts spoof any @icloud.com address while passing SPF, DKIM, and DMARC checks.

VBSpam Q3 2026 test shows phishers abusing DKIM-aligned domains, Amazon SES, and multi-stage URL cloaking to defeat email filters.

Virus Bulletin Q3 2026 report details phishing using DKIM-aligned senders, Amazon SES delivery, and real-time URL cloaking to evade email security and scanners.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views