Email security

Officials at Arlington, Massachusetts, confirmed the loss of more than $445,000 following a business email compromise attack against the town last year, reports StateScoop.Officials at Arlington, Massachusetts, confirmed the loss of more than $445,000 following a business email compromise attack against the town last year, reports StateScoop.

Threat actors have launched a new phishing campaign targeting Spanish-speaking individuals with an updated Agent Tesla malware variant, Hackread reports.

Widely known artificial intelligence email assistant EmailGPT was discovered by researchers from Synopsys' Cybersecurity Research Center to be impacted by a medium-severity prompt injection vulnerability, which could be exploited to enable data exposure, financial loss, and denial-of-service attacks, according to Hackread.

Canadian province British Columbia had 22 government email inboxes compromised following a suspected state-sponsored cyberattack that commenced in April, which exposed information from nearly 20 individuals, reports The Record, a news site by cybersecurity firm Recorded Future.

Data breach notification service Have I Been Pwned has been updated to include 361 million email addresses from credentials exfiltrated in credential-stuffing attacks and password-stealing malware intrusions that have been leaked on Telegram channels used by cybercriminals, BleepingComputer reports.

More than 900 of almost 2,300 official government email addresses belonging to politicians of Great Britain, France, and European Parliament have been exposed on the dark web, mostly impacting British senior government and opposition members, whose email addresses appeared over 2,100 times, SecurityWeek reports.

Georgia resident Malachi Mullings has been sentenced to a decade-long imprisonment for his involvement in business email compromise and romance scams, reports The Record, a news site by cybersecurity firm Recorded Future.