LLalit Kumar Jangid·4d agoI checked the DMARC records of the top 10,000 domains. Only 61% enforce itA DNS scan of SPF, DMARC, BIMI and MTA-STS across the top 10,000 domains: the method in Node, the parsing traps and the results.9 min read·lalitkumarjangid.hashnode.dev
GGerwin·Nov 2Your Recovery Email Is a Spare Key. Treat It Like One.Your recovery email can reset your main password. Abandoned addresses, lapsed domains, the circular recovery trap and a fifteen-minute audit to close them.9 min read·fuckit.hashnode.dev
KKazem Mortazavi·Nov 2Why Business Email Compromise Slips Past Signature-Based Email FiltersA finance manager receives a short email that appears to come from the CEO: "Wire this amount to this account before noon. I'm in a meeting and can't take calls." No attachment, no link. No antivirus2 min read·securityland.hashnode.dev
KKazem Mortazavi·Oct 20Why One Email Gateway Is Not Enough Against Business Email CompromiseThe most dangerous phishing emails carry no attachment and no link. Sometimes they are a single polite sentence: "Please wire the prepayment to this new account today." Such a message passes a convent3 min read·securityland.hashnode.dev11F
4404 Founders·Oct 16Cisco SEG CVE-2026-76519: Email Attachment to RootCisco SEG CVE-2026-76519 hits email security appliances with File Reputation enabled. Check fixed AsyncOS versions, cluster exposure and response.5 min read·404-founders.com
4404 Founders·Oct 16Five No-Click Outlook RCEs and the MOTW Bypass Already in UseThe October 2026 Patch Tuesday has 1,413 fixes. These five in Outlook and one in Windows Shell are the ones that change your email threat model.9 min read·404-founders.com
AAbdul Mateen·Oct 5SPF DKIM DMARC Setup for Small Business: 2026 GuideYour staff email may come from Microsoft 365 or Google Workspace. Your invoices may come from accounting software. Your website may send contact-form confirmations. Your CRM or newsletter tool may sen23 min read·bizriskguide.hashnode.dev11A
GGerwin·Oct 1SPF, DKIM and DMARC Explained Without the MigraineWhat the three acronyms actually check, how they fit together, and what changed when DMARC became a real standard in 2026.13 min read·fuckit.hashnode.dev1
GGerwin·Sep 27IMAP vs POP3: Which One Should You Actually Use?One keeps your mail in sync everywhere. The other takes it home and locks the door. How each works, which to pick, and when POP3 still makes sense.6 min read·fuckit.hashnode.dev1
KKrishnam Murarka·Sep 23A message can pass SPF and DKIM and still fail DMARCSPF passes. DKIM passes. DMARC fails. That combination reads like a contradiction, and it is not one, because DMARC is not asking the question the other two answer. SPF authenticates the envelope iden4 min read·edilec-engineering.hashnode.dev
