email security

Bank of Baroda's cybersecurity incident has highlighted how a single compromised employee email account can create risks for an entire organisation. On July 27, 2026, the bank confirmed that an employee's email account had been accessed without authorisation, exposing certain data. The bank stated that the incident was detected and contained quickly, its core banking systems remained unaffected, and an investigation was initiated with the relevant authorities.

Microsoft Defender for Office 365 now automatically detects and blocks email bombing attacks, enhancing protection for organizations against this growing cyber threat. Learn how this new feature works and its implications for email security.

A new phishing campaign has been uncovered targeting Russian-speaking users, leveraging the Gophish framework to deliver two remote access trojans (RATs)—DarkCrystal RAT (DCRat) and a newly identified malware, PowerRAT. The campaign exploits phishing emails, malicious documents, and HTML pages to initiate infection chains, resulting in system compromise and data exfiltration.

Robert Westbrook, a 39-year-old U.K. national, has been charged by the U.S. Department of Justice for allegedly orchestrating a hack-to-trade fraud scheme that netted him approximately $3.75 million in illegal profits by exploiting hacked Microsoft 365 executive emails.