[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-800-53\u002Fsi-8":3},{"item":4,"lessons":18,"controls":68,"related":99},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":13,"official_url":14,"link_label":15,"note":16,"updated_at":17},"nist-800-53","si-8","SI-8","Spam Protection",30,"US National Institute of Standards and Technology (NIST)","**What it asks for.** Spam protection mechanisms must be employed at system entry and exit points to detect and act on unsolicited messages, and they must be updated when new releases are available.\n\n**In practice.** Doing this well means a managed email security service or gateway with spam, phishing and malicious attachment filtering, sender authentication checks using SPF, DKIM and DMARC, and automatic updates of detection rules. Auditors look for configuration evidence, DMARC policies and filtering statistics. CIS Control 9 covers email protections. Users should have an easy way to report suspicious messages, which feeds back into tuning.\n\n**Common gaps.** DMARC is frequently left at a monitoring-only policy indefinitely. Filtering exceptions for specific senders or domains are added and never reviewed. Outbound filtering is often missing, so a compromised mailbox can be used to spam partners.","a. Employ spam protection mechanisms at system entry and exit points to detect and act on unsolicited messages; and\n  b. Update spam protection mechanisms when new releases are available in accordance with organizational configuration management policy and procedures.\nDiscussion: System entry and exit points include firewalls, remote-access servers, electronic mail servers, web servers, proxy servers, workstations, notebook computers, and mobile devices. Spam can be transported by different means, including email, email attachments, and web accesses. Spam protection mechanisms include signature definitions.","From NIST SP 800-53 Rev. 5, a work of the US government in the public domain.","https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F53\u002Fr5\u002Fupd1\u002Ffinal","Open SP 800-53 at NIST",null,"2026-10-18T15:18:43.663+00:00",{"total":9,"list":19},[20,24,28,32,36,40,44,48,52,56,60,64],{"slug":21,"title":22,"published_at":23},"phishing-as-a-service-how-yam-store-weaponized-cloud-infrastructure-at-scale","Phishing-as-a-Service: How Yam Store Weaponized Cloud Infrastructure at Scale","2026-10-14T22:20:50.865+00:00",{"slug":25,"title":26,"published_at":27},"billion-email-phishing-ecosystem-highlights-the-scale-of-industrialized-cybercrime","Billion-Email Phishing Ecosystem Highlights the Scale of Industrialized Cybercrime","2026-10-14T14:21:05.426+00:00",{"slug":29,"title":30,"published_at":31},"billion-message-phishing-ecosystem-targeting-microsoft-users-dismantled","Billion-Message Phishing Ecosystem Targeting Microsoft Users Dismantled","2026-10-14T14:20:50.56+00:00",{"slug":33,"title":34,"published_at":35},"russian-ai-powered-influence-operation-targets-latin-american-institutions","Russian AI-Powered Influence Operation Targets Latin American Institutions","2026-10-14T14:20:33.123+00:00",{"slug":37,"title":38,"published_at":39},"billion-message-phishing-network-dismantled-lessons-in-credential-theft-at-scale","Billion-Message Phishing Network Dismantled: Lessons in Credential Theft at Scale","2026-10-14T14:20:19.344+00:00",{"slug":41,"title":42,"published_at":43},"dprk-uses-simple-phishing-to-harvest-ukraine-war-intelligence","DPRK Uses Simple Phishing to Harvest Ukraine War Intelligence","2026-10-13T22:21:00.206+00:00",{"slug":45,"title":46,"published_at":47},"ai-powered-influence-operations-infiltrate-western-media-via-fake-personas","AI-Powered Influence Operations Infiltrate Western Media via Fake Personas","2026-10-08T18:20:23.317+00:00",{"slug":49,"title":50,"published_at":51},"nikkei-employee-email-accounts-hijacked-used-to-launch-internal-phishing-campaign","Nikkei Employee Email Accounts Hijacked, Used to Launch Internal Phishing Campaign","2026-10-06T10:20:51.402+00:00",{"slug":53,"title":54,"published_at":55},"china-linked-group-phishes-ai-policy-experts-via-fake-microsoft-login-pages","China-Linked Group Phishes AI Policy Experts via Fake Microsoft Login Pages","2026-10-01T16:22:11.851+00:00",{"slug":57,"title":58,"published_at":59},"star-blizzard-evolves-phishing-tactics-with-redflick-campaign","Star Blizzard Evolves Phishing Tactics with RedFlick Campaign","2026-09-30T16:22:02.201+00:00",{"slug":61,"title":62,"published_at":63},"amazon-prime-phishing-scam-harvests-credentials-and-card-data-via-fake-billing-alerts","Amazon Prime Phishing Scam Harvests Credentials and Card Data via Fake Billing Alerts","2026-09-30T12:21:12.766+00:00",{"slug":65,"title":66,"published_at":67},"ai-powered-phishing-reaches-mass-personalization-at-scale","AI-Powered Phishing Reaches Mass Personalization at Scale","2026-09-11T20:20:16.172+00:00",[69,74,79,84,89,94],{"slug":70,"name":71,"problem":72,"stories":73},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",23,{"slug":75,"name":76,"problem":77,"stories":78},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",17,{"slug":80,"name":81,"problem":82,"stories":83},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",10,{"slug":85,"name":86,"problem":87,"stories":88},"email-authentication","Email authentication (DMARC)","Nobody can send email that pretends to come from your domain.",8,{"slug":90,"name":91,"problem":92,"stories":93},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",7,{"slug":95,"name":96,"problem":97,"stories":98},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",4,[100,105,110,116,120,125,131,135],{"family":5,"item":101,"code":102,"title":103,"together":104},"at-2","AT-2","Literacy Training and Awareness",25,{"family":106,"item":107,"code":108,"title":109,"together":104},"cis","14","Control 14","Security Awareness and Skills Training",{"family":111,"item":112,"code":113,"title":114,"together":115},"gdpr","32","Article 32","Security of processing",19,{"family":106,"item":117,"code":118,"title":119,"together":78},"9","Control 9","Email and Web Browser Protections",{"family":121,"item":122,"code":123,"title":123,"together":124},"itil","overview","ITIL",12,{"family":126,"item":127,"code":128,"title":129,"together":130},"nist-csf","pr-at","PR.AT-1","Awareness and Training",9,{"family":106,"item":132,"code":133,"title":134,"together":88},"17","Control 17","Incident Response Management",{"family":136,"item":137,"code":138,"title":139,"together":93},"nist-sp","800-177","SP 800-177","SP 800-177 Rev. 1: Trustworthy Email"]