Sam's News — email-security — 2026-08-16¶
Security¶
7.5 NSA Alerts on Russian State-Backed Phishing Campaign Targeting Zimbra Collaboration Suite¶
The NSA and partner agencies issued a cybersecurity alert warning of a Russian state-supported phishing campaign targeting Zimbra Collaboration Suite users.
Sources: National Security Agency (NSA) (.gov) Web Search Update to: NSA and Partners Alert Zimbra Users of Russian State-Sponsored Phishing Campaign
6.5 Business Email Compromise Detection Using Threat Intelligence¶
Group-IB demonstrates how business email protection systems can predict and detect BEC attacks before they occur by identifying stolen credentials.
Sources: Group-IB Web Search Update to: Business Email Compromise Attacks Often Begin With Credential Theft, Not Malicious Email
6.5 RecruitTrap Phishing Campaign: 3,000+ URLs Using Browser-in-the-Browser Tactic¶
Researchers uncover RecruitTrap, a phishing campaign using over 3,000 URLs and browser-in-the-browser (BitB) credential traps to harvest Google and Facebook credentials.
Sources: The Hacker News Web Search Update to: RecruitTrap Campaign Uses 3,000+ Phishing URLs with Browser-in-the-Browser Attacks
6.5 Security Awareness Training Reduces Phishing Success¶
Security awareness training significantly mitigates human error, which accounts for roughly 95% of cybersecurity breaches according to IBM research.
Sources: EdTech Magazine Web Search Update to: Security Awareness Training Significantly Reduces Phishing Attack Success Rates
6.5 AI-Enhanced Phishing: Cybercriminals' New Tactics and Defensive Countermeasures¶
Criminals are using generative AI to create linguistically convincing phishing emails, representing a major shift in attack sophistication in recent years.
- AI-driven phishing now grammatically perfect, contextually relevant
- Evades traditional typo/formatting-based detection
- DMARC, domain monitoring, callback verification recommended
- Phishing-resistant MFA beyond SMS/push essential
Sources: CDK Global Web Search, PCWorld Web Search Update to: AI-powered phishing attacks grow more convincing; defense strategies emerge
6.5 Iran Launches Phishing Campaign Targeting Israeli Journalists¶
Iran conducted a phishing campaign targeting Israeli journalists to harvest credentials.
Sources: Roya News RSS
5.5 Jersey Organizations Hit by Cyber Attack; Phishing Email Warning Issued¶
Following a cyber attack affecting multiple Jersey organizations, authorities warn of increased phishing emails targeting Islanders.
Sources: Channel Eye Web Search Update to: Jersey Issues Phishing Warning After Cyber Attack Affects Multiple Organizations
5.5 2026 Email Security Report: AI, Phishing, and Emerging Defense Strategies¶
A 2026 email security report examines how artificial intelligence is transforming both phishing attacks and defense mechanisms.
Sources: Kaseya Web Search
5 Q2 2026 Email Threat Landscape Report¶
A second-quarter 2026 email security report analyzes emerging threats and trends, including downstream effects from Microsoft's Digital Crimes unit actions.
Sources: Microsoft Web Search Update to: Email Threat Landscape: Q2 2026 Trends and Insights
Email Security¶
6 Cisco Secure Email Threat Defense Achieves FedRAMP Class D (High) Certification¶
Cisco announced on August 10, 2026, that its Secure Email Threat Defense solution has achieved FedRAMP Class D (High) certification, the U.S. government's standardized security authorization for cloud services. This certification enables the solution to protect federal agencies, contractors, and regulated organizations handling sensitive or classified data with continuous monitoring and independently verified security controls.
- Cisco Secure Email Threat Defense received FedRAMP Class D (High) certification on August 10, 2026
- FedRAMP authorization requires stringent security controls, continuous monitoring, and independent third-party assessments
- The solution is available in both API-based supplemental control and inline gateway-level protection modes
- Certification mandates persistent scrutiny and continuous authorization, not one-time audits
Sources: Cisco Blogs AI Web Searched, Cisco Blogs Web Search