[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:email-authentication":3},{"control":4,"products":25,"stories":56,"lessons":98,"related":123,"compare":144},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"email-authentication","Email authentication (DMARC)","Nobody can send email that pretends to come from your domain.","Publishing SPF, DKIM and an enforced DMARC policy, and monitoring the reports, so receiving mail servers reject messages that spoof your domain.","Email spoofing your own domain is used to defraud your customers and suppliers, and it damages trust in your brand. The large mailbox providers now require DMARC from bulk senders. Enforcement is mostly a configuration project; the tools help you find every legitimate sender first, so nothing breaks.",[11,12,13,14],"Will it get us to p=reject without blocking our own legitimate mail?","Does it identify every service that sends mail as our domain?","Does it cover all our domains, including parked ones?","Does it support BIMI and MTA-STS?","Risk: criminals send fraudulent email in our name to customers and suppliers. Control: SPF, DKIM and DMARC at p=reject on all domains. Owner: IT operations lead. Measure: domains at DMARC enforcement.",[17,18,19,20],"NIS2 Art. 21(2)(g): basic cyber hygiene","DORA Art. 9: protection and prevention","CIS Control 9.5: implement DMARC","ISO\u002FIEC 27001:2022 A.8.21: security of network services",{"name":22,"slug":23},"Configuration Management","configuration-management","2026-10-16T12:48:12.120006+00:00",[26,32,40,48],{"vendor_slug":27,"vendor_name":27,"vendor_logo":28,"product_slug":29,"product_name":27,"url":30,"description":31},"dmarcian","\u002Fvendor-logos\u002Fdmarcian.png","dmarcian-platform","https:\u002F\u002Fdmarcian.com\u002F","DMARC report processing and guidance for moving domains to enforcement.",{"vendor_slug":33,"vendor_name":34,"vendor_logo":35,"product_slug":36,"product_name":37,"url":38,"description":39},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","email-fraud-defense","Proofpoint Email Fraud Defense","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-fraud-defense","DMARC deployment and monitoring with hosted SPF and DKIM services.",{"vendor_slug":41,"vendor_name":42,"vendor_logo":43,"product_slug":44,"product_name":45,"url":46,"description":47},"red-sift","Red Sift","\u002Fvendor-logos\u002Fred-sift.png","ondmarc","Red Sift OnDMARC","https:\u002F\u002Fredsift.com\u002Fpulse-platform\u002Fondmarc","Guided DMARC deployment and monitoring, with support for BIMI and MTA-STS.",{"vendor_slug":49,"vendor_name":50,"vendor_logo":51,"product_slug":52,"product_name":53,"url":54,"description":55},"valimail","Valimail","\u002Fvendor-logos\u002Fvalimail.png","valimail-enforce","Valimail Enforce","https:\u002F\u002Fwww.valimail.com\u002Fproducts\u002Fenforce\u002F","Automated DMARC enforcement with discovery of every service that sends mail as your domain.",{"total":57,"last_days":58,"recent":59},72,31,[60,65,70,75,79,83,88,93],{"slug":61,"title":62,"published_at":63,"brief":64},"microsoft-disrupts-3-phishing-kits-linked-to-over-1-billion-scam-messages-fbe33b","Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages","2026-10-14T17:09:15+00:00","Microsoft disrupts 3 phishing kits responsible for over 1 billion scam messages.",{"slug":66,"title":67,"published_at":68,"brief":69},"global-takedown-hits-network-behind-1-billion-phishing-messages-d21e2d","Global takedown hits network behind 1 billion phishing messages","2026-10-14T13:12:52+00:00","Global takedown disrupts cybercrime network behind 1 billion phishing messages.",{"slug":71,"title":72,"published_at":73,"brief":74},"russian-influence-operation-widely-targeting-latin-america-1844a1","Russian Influence Operation Widely Targeting Latin America","2026-10-14T13:00:00+00:00","Russian influence operation uses AI, spoofed emails, and fake documents in Latin America.",{"slug":76,"title":77,"published_at":73,"brief":78},"the-hidden-network-inside-the-phishing-infrastructure-ecosystem-powering-global--213315","The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime","Microsoft disrupts Chinese-language phishing kit ecosystem and illicit marketplace.",{"slug":80,"title":81,"published_at":73,"brief":82},"microsoft-and-partners-disrupt-vast-chinese-language-phishing-kit-ecosystem-987ce0","Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem","Microsoft and partners disrupt Chinese-language phishing kit ecosystem, stopping over 1 billion messages.",{"slug":84,"title":85,"published_at":86,"brief":87},"google-domains-impacted-by-recent-cctld-hijacks-9fbb49","Google Domains Impacted by Recent ccTLD Hijacks","2026-10-09T11:43:14+00:00","Hackers hijacked ccTLDs .gh, .sl, and .as, obtaining unauthorized HTTPS certificates for Google domains.",{"slug":89,"title":90,"published_at":91,"brief":92},"attackers-hijack-gh-sl-and-as-registries-to-obtain-certificates-for-google-domai-d19160","Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains","2026-10-07T18:48:17+00:00","Attackers hijacked .gh, .sl, and .as domain registries to obtain unauthorized HTTPS certificates for Google domains.",{"slug":94,"title":95,"published_at":96,"brief":97},"chinese-hackers-impersonate-us-officials-for-ai-cyber-espionage-0a4d99","Chinese Hackers Impersonate US Officials for AI Cyber Espionage","2026-10-05T15:52:59+00:00","Chinese hackers impersonate US officials for AI cyber espionage.",[99,103,107,111,115,119],{"slug":100,"title":101,"published_at":102},"billion-message-phishing-campaign-disrupted-by-microsoft-coalition","Billion-Message Phishing Campaign Disrupted by Microsoft Coalition","2026-10-14T20:21:09.517+00:00",{"slug":104,"title":105,"published_at":106},"billion-email-phishing-ecosystem-highlights-the-scale-of-industrialized-cybercrime","Billion-Email Phishing Ecosystem Highlights the Scale of Industrialized Cybercrime","2026-10-14T14:21:05.426+00:00",{"slug":108,"title":109,"published_at":110},"russian-ai-powered-influence-operation-targets-latin-american-institutions","Russian AI-Powered Influence Operation Targets Latin American Institutions","2026-10-14T14:20:33.123+00:00",{"slug":112,"title":113,"published_at":114},"billion-message-phishing-network-dismantled-lessons-in-credential-theft-at-scale","Billion-Message Phishing Network Dismantled: Lessons in Credential Theft at Scale","2026-10-14T14:20:19.344+00:00",{"slug":116,"title":117,"published_at":118},"cctld-hijacks-expose-dns-and-certificate-authority-weaknesses","ccTLD Hijacks Expose DNS and Certificate Authority Weaknesses","2026-10-09T12:20:22.268+00:00",{"slug":120,"title":121,"published_at":122},"cctld-registry-breaches-enable-dns-hijacking-of-google-domains","ccTLD Registry Breaches Enable DNS Hijacking of Google Domains","2026-10-07T22:20:37.185+00:00",[124,128,132,136,140],{"slug":125,"name":126,"problem":127},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",{"slug":129,"name":130,"problem":131},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",{"slug":133,"name":134,"problem":135},"saas-security-posture","SaaS security posture management (SSPM)","Business apps like Microsoft 365 and Salesforce stop leaking through risky settings and connected apps.",{"slug":137,"name":138,"problem":139},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",{"slug":141,"name":142,"problem":143},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",{"proofpoint\u002Femail-fraud-defense":145,"valimail\u002Fvalimail-enforce":160,"red-sift\u002Fondmarc":166,"dmarcian\u002Fdmarcian-platform":173},{"hq_country":146,"also_provides":147,"reviews":148,"affected":158,"reported":159},"US",[],[149,152,155],{"label":150,"url":151},"Gartner Peer Insights: Proofpoint Threat Protection user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fproofpoint-threat-protection",{"label":153,"url":154},"PeerSpot: Proofpoint Email Protection user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fproofpoint-email-protection-reviews",{"label":156,"url":157},"PeerSpot: Proofpoint Enterprise DLP user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fproofpoint-enterprise-dlp-reviews",0,15,{"hq_country":146,"also_provides":161,"reviews":162,"affected":158,"reported":158},[],[163],{"label":164,"url":165},"Gartner Peer Insights: Valimail Enforce user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fvalimail-enforce",{"hq_country":167,"also_provides":168,"reviews":169,"affected":158,"reported":158},"GB",[],[170],{"label":171,"url":172},"Gartner Peer Insights: Red Sift OnDMARC user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fred-sift-ondmarc",{"hq_country":146,"also_provides":174,"reviews":175,"affected":158,"reported":158},[],[]]