#emailsecurity

Hi

I am new here. A sysadmin / dev in Switzerland. Some self promotion of a new project I made for DMARC analysis.

Marcan, a selfhosted dmarc analyzer. Single container (rust, sqlite, web ui built in), reads the aggregate reports from an imap mailbox and recomputes spf / dkim alignment itself instead of trusting the reporter. It splits into 4 categories

• DMARC pass
• Blocked by policy
• Forwarded
• Delivered failures And lets you analyze the actual failure reasons / failing senders.

I made it cuz I had the task to get ahold of our email-security (disaster) and found existing tools lacked the sort of small scale MSP toolset I needed, and paid tools were to expensive for what is needed.

It has been in development now for over 2 months, AI assisted, but also continuously tested on the entire set of domains.

https://marcan.kaitiaki.tech source: https://github.com/mavgit1/marcan-dmarc

#introduction #SelfHosted #DMARC #EmailSecurity #security

Discover why GitHub blocks Outlook and Hotmail for new account registrations. Learn about the persistent fraud and abuse driving this Microsoft email ban. #GitHub #Microsoft #EmailSecurity #TechNews #CyberSecurity

Cisco Secure Email Gateway faces a CRITICAL zero-day vulnerability, actively exploited in the wild. No CVE or version info yet. Patch available — apply ASAP to protect email infrastructure. https://radar.offseq.com/threat/cisco-patches-secure-email-gateway-zero-day-exploited-in-attacks-76a43690673247c4 #OffSeq #Cisco #ZeroDay #BlueTeam #EmailSecurity

One Email, Three Identities: SPF, DKIM and DMARC Explained https://senderledger.com/articles/one-email-three-identities-spf-dkim-dmarc #HackerNews #Tech #EmailSecurity

🤖 PortSwigger research: malicious email content can escape its message boundary and attack the webmail UI. Chains against Outlook, Gmail, Fastmail, Proton, Yahoo and AOL can steal passwords, leak tokens and hijack trusted UI actions. 🔗 https://thehackernews.com/2026/08/new-css-attacks-can-break-webmail.html #CyberSec #InfoSec #EmailSecurity

Top malicious IPs observed on 6 August 2026 223.160.125.128 (China) https://sh4meful.com/ip/223.160.125.128 212.154.247.139 (Kazakhstan) https://sh4meful.com/ip/212.154.247.139 185.138.186.234 (Kyrgyzstan) https://sh4meful.com/ip/185.138.186.234 145.249.227.150 (Kazakhstan) https://sh4meful.com/ip/145.249.227.150 95.214.211.184 (Uzbekistan) https://sh4meful.com/ip/95.214.211.184 89.218.248.206 (Kazakhstan) https://sh4meful.com/ip/89.218.248.206 89.218.231.130 (Kazakhstan) https://sh4meful.com/ip/89.218.231.130 87.192.232.206 (Uzbekistan) https://sh4meful.com/ip/87.192.232.206 84.240.250.152 (Kazakhstan) https://sh4meful.com/ip/84.240.250.152 82.200.143.174 (Kazakhstan) https://sh4meful.com/ip/82.200.143.174 #infosec #spam #spoof #emailsecurity

Sendmail sits in the path of every email transaction your organization sends or receives. It logs auth attempts, TLS negotiations, relay IPs, forged hostnames, and rejections. Most teams treat that as noise. It's early-warning threat telemetry. The Sendmail Content Pack for Graylog parses those logs into GIM-mapped events and a six-tab Illuminate dashboard, automatically. https://graylog.org/post/sendmail-data-in-graylog/ #SIEM #ThreatHunting #EmailSecurity

🔒 Neues Wissen, mehr Sicherheit! 🎓 Ich habe die Masterclass „DomainSecurity“ der InterNexum GmbH erfolgreich absolviert! 🎉 📌 Was wurde gelernt? ✔ Grundlagen Domainmanagement & DNS ✔ E-Mail-Authentisierung (SPF, DKIM, DMARC) ✔ E-Mail-Transport-Sicherheit (MTA-STS, TLS-RPT, DANE) ✔ DNS-Sicherheit (DNSSEC, CAA, TLSA) ✔ BIMI für vertrauenswürdige E-Mails 💡 Und das Beste? Dieses Wissen wird bei Zempel IT Security bereits eingesetzt, um den eigenen E-Mail-Verkehr bestmöglich abzusichern – für mehr Schutz vor Phishing, Spoofing & Co.! 🚀 Sicherheit ist kein Zufall, sondern das Ergebnis von Wissen und Umsetzung. https://zempel-itsecurity.de/home/zis-blog/33-neues-wissen,-mehr-sicherheit-bj%C3%B6rn-zempel-erfolgreich-in-domainsecurity-zertifiziert #DomainSecurity #EmailSecurity #ZempelITSecurity #Cybersecurity #DNS #DMARC #ITSecurity #KnowledgeIsPower

Reward: Congratulations! You've received a Loot Box containing your own sent folder, read receipts, and attachments. Non-transferable. Non-refundable. Already transferred. #Cybersecurity #RussianHackers #Zimbra #EmailSecurity #ZeroDay #NoSocialEngineeringNeeded (3/3)

Top malicious IPs observed on 26 July 2026 103.151.30.185 (Bangladesh) https://sh4meful.com/ip/103.151.30.185 103.151.30.184 (Bangladesh) https://sh4meful.com/ip/103.151.30.184 116.206.188.228 (Afghanistan) https://sh4meful.com/ip/116.206.188.228 210.18.142.197 (India) https://sh4meful.com/ip/210.18.142.197 203.112.77.238 (Bangladesh) https://sh4meful.com/ip/203.112.77.238 177.85.122.107 (Brazil) https://sh4meful.com/ip/177.85.122.107 170.245.30.170 (Brazil) https://sh4meful.com/ip/170.245.30.170 138.59.140.158 (Argentina) https://sh4meful.com/ip/138.59.140.158 103.203.147.10 (India) https://sh4meful.com/ip/103.203.147.10 103.155.196.37 (Indonesia) https://sh4meful.com/ip/103.155.196.37 #infosec #spam #spoof #emailsecurity

Top malicious IPs observed on 25 July 2026 115.127.126.102 (Bangladesh) https://sh4meful.com/ip/115.127.126.102 103.156.168.164 (India) https://sh4meful.com/ip/103.156.168.164 103.132.173.126 (India) https://sh4meful.com/ip/103.132.173.126 94.183.115.120 (Iran) https://sh4meful.com/ip/94.183.115.120 45.231.194.129 (Brazil) https://sh4meful.com/ip/45.231.194.129 45.181.230.205 (Brazil) https://sh4meful.com/ip/45.181.230.205 27.123.254.153 (Bangladesh) https://sh4meful.com/ip/27.123.254.153 216.189.106.84 (United States) https://sh4meful.com/ip/216.189.106.84 213.74.211.146 (Türkiye) https://sh4meful.com/ip/213.74.211.146 213.207.49.189 (Albania) https://sh4meful.com/ip/213.207.49.189 #infosec #spam #spoof #emailsecurity

Top malicious IPs observed on 24 July 2026 168.245.17.70 (United States) https://sh4meful.com/ip/168.245.17.70 158.94.208.191 (Germany) https://sh4meful.com/ip/158.94.208.191 92.55.171.93 (Kazakhstan) https://sh4meful.com/ip/92.55.171.93 34.23.184.23 (United States) https://sh4meful.com/ip/34.23.184.23 2.135.86.40 (Kazakhstan) https://sh4meful.com/ip/2.135.86.40 2.73.220.2 (Kazakhstan) https://sh4meful.com/ip/2.73.220.2 1.1.191.26 (Thailand) https://sh4meful.com/ip/1.1.191.26 #infosec #spam #spoof #emailsecurity

E-Mail-Bedrohungslage Q2 2026: Phishing im Wandel https://www.all-about-security.de/e-mail-bedrohungslage-q2-2026-phishing-im-wandel/ #phishing #email #emailsecurity #Tycoon2FA #QRCodePhishing

Top malicious IPs observed on 23 July 2026 185.213.116.2 (United Kingdom) https://sh4meful.com/ip/185.213.116.2 220.134.175.115 (Taiwan) https://sh4meful.com/ip/220.134.175.115 180.131.140.6 (Japan) https://sh4meful.com/ip/180.131.140.6 221.180.254.100 (China) https://sh4meful.com/ip/221.180.254.100 113.203.94.185 (Iran) https://sh4meful.com/ip/113.203.94.185 60.222.37.191 (China) https://sh4meful.com/ip/60.222.37.191 #infosec #spam #spoof #emailsecurity

🤖 CISA warns Russian APT group Laundry Bear (Void Blizzard) is exploiting a zero-click Zimbra Collaboration vulnerability in active attacks. The flaw, combined with phishing, allows email theft from unpatched servers. 🔗 https://www.bleepingcomputer.com/news/security/russian-hackers-exploit-zimbra-zero-click-flaw-for-email-theft/ #CVE #Zimbra #CyberSec #APT #EmailSecurity

Microsofts utvecklare försöker nu hitta en lösning på problemet.#Windows #OperatingSystems #EmailSecurity #CommunicationsSecurity #NetworkSecurity #Security Bugg i Exchange Online kan göra att dina mejl hamnar i karantän

Top malicious IPs observed on 21 July 2026 193.253.101.87 (Réunion) https://sh4meful.com/ip/193.253.101.87 91.199.154.105 (Estonia) https://sh4meful.com/ip/91.199.154.105 142.112.48.163 (Canada) https://sh4meful.com/ip/142.112.48.163 136.66.209.222 (United States) https://sh4meful.com/ip/136.66.209.222 34.59.205.90 (United States) https://sh4meful.com/ip/34.59.205.90 213.230.121.122 (Uzbekistan) https://sh4meful.com/ip/213.230.121.122 171.100.190.109 (Thailand) https://sh4meful.com/ip/171.100.190.109 213.230.86.53 (Uzbekistan) https://sh4meful.com/ip/213.230.86.53 185.177.0.235 (Tajikistan) https://sh4meful.com/ip/185.177.0.235 124.77.203.86 (China) https://sh4meful.com/ip/124.77.203.86 #infosec #spam #spoof #emailsecurity

Top malicious IPs observed on 18 July 2026 35.204.185.62 (The Netherlands) https://sh4meful.com/ip/35.204.185.62 34.12.156.16 (The Netherlands) https://sh4meful.com/ip/34.12.156.16 196.179.232.234 (Tunisia) https://sh4meful.com/ip/196.179.232.234 221.210.74.139 (China) https://sh4meful.com/ip/221.210.74.139 180.254.202.43 (Indonesia) https://sh4meful.com/ip/180.254.202.43 38.49.133.170 (Mexico) https://sh4meful.com/ip/38.49.133.170 185.243.99.50 (Ukraine) https://sh4meful.com/ip/185.243.99.50 158.181.42.41 (Azerbaijan) https://sh4meful.com/ip/158.181.42.41 45.174.88.88 (Mexico) https://sh4meful.com/ip/45.174.88.88 39.35.231.35 (Pakistan) https://sh4meful.com/ip/39.35.231.35 #infosec #spam #spoof #emailsecurity

People with businesses & others. FIX YOUR EMAILS! DKIM, DMARC, and SPF aren't options... You end up in JUNK, or, in a lot of cases, NEVER SEEN / BLOCKED. Wonder why you never get any replies... Seriously. Fix your domain records. FUCK! #Tech #Internet #Email #Security #Junk #Junkmail #EmailSecurity

Top malicious IPs observed on 7 July 2026 118.69.53.236 (Vietnam) https://sh4meful.com/ip/118.69.53.236 91.92.241.38 (The Netherlands) https://sh4meful.com/ip/91.92.241.38 34.78.5.147 (Belgium) https://sh4meful.com/ip/34.78.5.147 37.151.242.166 (Kazakhstan) https://sh4meful.com/ip/37.151.242.166 185.243.99.53 (Ukraine) https://sh4meful.com/ip/185.243.99.53 185.243.99.43 (Ukraine) https://sh4meful.com/ip/185.243.99.43 141.98.10.86 (Lithuania) https://sh4meful.com/ip/141.98.10.86 84.54.73.62 (Uzbekistan) https://sh4meful.com/ip/84.54.73.62 #infosec #spam #spoof #emailsecurity