[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-177":3},{"item":4,"lessons":16,"controls":66,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-177","SP 800-177","SP 800-177 Rev. 1: Trustworthy Email",24,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST guidance on improving the security and trustworthiness of email. It covers domain-based protections such as SPF, DKIM and DMARC, transport encryption between mail servers, and options for end-to-end message security. It is written for US federal agencies but applies to any organisation that sends and receives email.\n\n**In practice.** Applying it well means publishing SPF and DKIM for every sending domain, moving DMARC towards an enforcement policy and monitoring the reports, and enforcing encryption in transit between mail servers where possible. Domains that do not send mail are also protected against spoofing. Evidence includes DNS records, DMARC report analysis and mail server configuration.\n\n**Common gaps.** Common gaps are DMARC left at monitoring only, forgotten domains and third-party senders that are not authenticated. Mail from marketing platforms and other suppliers sending on the organisation's behalf is often overlooked when policies are tightened.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpublications\u002Fsp800","Find it among NIST SP 800 publications","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"billion-message-phishing-infrastructure-dismantled-by-microsoft-and-partners","Billion-Message Phishing Infrastructure Dismantled by Microsoft and Partners","2026-10-15T12:20:54.937+00:00",{"slug":23,"title":24,"published_at":25},"phishing-as-a-service-how-yam-store-weaponized-cloud-infrastructure-at-scale","Phishing-as-a-Service: How Yam Store Weaponized Cloud Infrastructure at Scale","2026-10-14T22:20:50.865+00:00",{"slug":27,"title":28,"published_at":29},"billion-message-phishing-campaign-disrupted-by-microsoft-coalition","Billion-Message Phishing Campaign Disrupted by Microsoft Coalition","2026-10-14T20:21:09.517+00:00",{"slug":31,"title":32,"published_at":33},"chinese-language-phishing-as-a-service-market-disrupted-after-1b-malicious-messages","Chinese-Language Phishing-as-a-Service Market Disrupted After 1B+ Malicious Messages","2026-10-14T14:21:21.247+00:00",{"slug":35,"title":36,"published_at":37},"china-linked-group-phishes-ai-policy-experts-via-fake-microsoft-login-pages","China-Linked Group Phishes AI Policy Experts via Fake Microsoft Login Pages","2026-10-01T16:22:11.851+00:00",{"slug":39,"title":40,"published_at":41},"amazon-prime-phishing-scam-harvests-credentials-and-card-data-via-fake-billing-alerts","Amazon Prime Phishing Scam Harvests Credentials and Card Data via Fake Billing Alerts","2026-09-30T12:21:12.766+00:00",{"slug":43,"title":44,"published_at":45},"hijacked-university-emails-used-to-scam-students-via-phishing-and-advance-fee-fraud","Hijacked University Emails Used to Scam Students via Phishing and Advance-Fee Fraud","2026-09-29T18:21:41.383+00:00",{"slug":47,"title":48,"published_at":49},"ai-powered-phishing-reaches-mass-personalization-at-scale","AI-Powered Phishing Reaches Mass Personalization at Scale","2026-09-11T20:20:16.172+00:00",{"slug":51,"title":52,"published_at":53},"invisible-unicode-characters-used-to-bypass-ai-phishing-filters","Invisible Unicode Characters Used to Bypass AI Phishing Filters","2026-09-11T16:20:37.215+00:00",{"slug":55,"title":56,"published_at":57},"blob-url-phishing-bypasses-scanners-by-rendering-malicious-pages-inside-the-browser","Blob URL Phishing Bypasses Scanners by Rendering Malicious Pages Inside the Browser","2026-09-09T10:20:25.805+00:00",{"slug":59,"title":60,"published_at":61},"invisible-unicode-characters-used-to-bypass-email-security-filters","Invisible Unicode Characters Used to Bypass Email Security Filters","2026-09-06T16:20:22.447+00:00",{"slug":63,"title":64,"published_at":65},"invisible-unicode-characters-used-to-bypass-email-filters-in-mass-phishing-campaign","Invisible Unicode Characters Used to Bypass Email Filters in Mass Phishing Campaign","2026-09-04T18:22:22.624+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",23,{"slug":73,"name":74,"problem":75,"stories":76},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",15,{"slug":78,"name":79,"problem":80,"stories":81},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",9,{"slug":83,"name":84,"problem":85,"stories":86},"email-authentication","Email authentication (DMARC)","Nobody can send email that pretends to come from your domain.",5,{"slug":88,"name":89,"problem":90,"stories":91},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",4,{"slug":93,"name":94,"problem":95,"stories":91},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[97,103,109,113,119,124,129,135],{"family":98,"item":99,"code":100,"title":101,"together":102},"cis","14","Control 14","Security Awareness and Skills Training",22,{"family":104,"item":105,"code":106,"title":107,"together":108},"gdpr","32","Article 32","Security of processing",20,{"family":98,"item":110,"code":111,"title":112,"together":108},"9","Control 9","Email and Web Browser Protections",{"family":114,"item":115,"code":116,"title":117,"together":118},"nist-800-53","at-2","AT-2","Literacy Training and Awareness",18,{"family":120,"item":121,"code":122,"title":122,"together":123},"itil","overview","ITIL",13,{"family":114,"item":125,"code":126,"title":127,"together":128},"si-3","SI-3","Malicious Code Protection",10,{"family":130,"item":131,"code":132,"title":133,"together":134},"mitre-attack","t1566","T1566","Phishing",8,{"family":5,"item":136,"code":137,"title":138,"together":134},"800-61","SP 800-61","SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management"]