The damage of Microsoft’s recent email hack continues as criminal groups rush to take part in the action, exploiting vulnerabilities and compromising victims before it is secured.
The attack targeted flaws in email software that allowed criminals to steal valuable data due to the lack of end-to-end encryption (E2EE). Unencrypted email, unless PGP, is just a sitting target if your server gets breached, much like Microsoft’s. An increasingly attractive target too, when you consider the average office worker spends 40 emails per day.
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.