
Verify Order Notifications: Attackers Abuse Staples and Dell Email Pipelines
Threat researchers found that criminals are inserting scam phone numbers into legitimate retail transaction emails to bypass security filters.
Everything BlueTeam Herald has reported about Email Security: 6 stories, newest first. Part of our Cyber Attacks coverage.

Threat researchers found that criminals are inserting scam phone numbers into legitimate retail transaction emails to bypass security filters.

A single misconfigured SPF record can block legitimate invoices while still allowing attackers to send convincing messages from your domain.

Attackers exploit organizational hierarchy and urgency rather than technical vulnerabilities to trick employees into moving money or data.

Romance scams often bypass security controls by exploiting human trust rather than technical vulnerabilities, leaving subtle behavioral traces in communication logs.

Attackers exploit your desire to be helpful by mimicking authority figures, turning your compliance into a security breach without needing technical exploits.

Attackers often leave the account active to harvest contacts, making silent forwarding rules and missing sent items the most reliable indicators of a breach.