Microsoft consumer mail rejects legitimate messages lacking DMARC
Bounces citing 550 5.7.1 or 550 5.7.23 began November 5 and also hit small senders.
Stories per day · 30 days
2 RSS
Relateddkim4email-authentication3callback-scam2dell2spf2staples2bimi1callback-phishing1cisco-talos1election-security1gov-domains1https1microsoft1order-notifications1outlook1phishing1third-party-tracking1transactional-email1
8 stories, newest first · one card per story
Stories tagged #dmarc
42% of US county election sites still lack .gov domains
Of 2,081 county election sites, 869 are off .gov; about 51% of contact domains lack enforced DMARC.
1
Scammers hide callback numbers in real Dell and Staples order emails
Cisco Talos saw about 1,400 messages whose DKIM and DMARC checks still passed.
1
Attackers send authenticated phishing through Dell, Staples and other platforms
Cisco Talos saw about 1,400 Dell and Staples messages that planted callback numbers in order fields.
1
Attackers hide scam helplines in Staples and Dell order emails
Cisco Talos saw about 1,400 messages whose DKIM and DMARC checks passed while pushing victims to call.
1
EasyDMARC and GMO GlobalSign link DMARC management with BIMI certificates
Customers can add VMCs or CMCs so supported inboxes display verified logos alongside DMARC controls.
Free iCloud Account Could Let Attackers Spoof Any @icloud.com Address and Pass Email Security Checks
Two patched Apple iCloud SMTP parsing flaws let free accounts spoof any @icloud.com address while passing SPF, DKIM, and DMARC checks.
Hackers Favor US Eastern Business Hours in M365 Phishing Campaign
KnowBe4 tracked 29,785 phishing emails abusing Microsoft 365 Direct Send to spoof internal senders while timing sends to US Eastern business hours.
5