Cybersecurity articles tagged #Email Security on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/autonomous-ai-agents-email-security-insights-on-perimeter-defenceshttps://runtimerebel.com/blog/autonomous-ai-agents-email-security-insights-on-perimeter-defencesAn autonomous AI agent emailed security researcher Bruce Schneier detailing perimeter defences, anti-bot mechanisms, and invisible prompt injections.Wed, 02 Sep 2026 19:09:10 GMTArtificial IntelligencePrompt InjectionBot ManagementEmail Securityhttps://runtimerebel.com/blog/ai-email-summarizers-vulnerable-to-hidden-html-promptshttps://runtimerebel.com/blog/ai-email-summarizers-vulnerable-to-hidden-html-promptsAttackers can use invisible HTML prompts to manipulate AI email summarizers, generating false information and potential security risks.Wed, 26 Aug 2026 00:44:15 GMTAIPrompt InjectionEmail SecuritySocial EngineeringHidden HTMLhttps://runtimerebel.com/blog/detecting-ai-driven-polymorphic-phishing-attackshttps://runtimerebel.com/blog/detecting-ai-driven-polymorphic-phishing-attacksAI-powered phishing attacks leverage personalization and polymorphic evasion, challenging traditional filters. MSPs must focus on post-compromise detection.Fri, 21 Aug 2026 08:29:38 GMTSpear PhishingEmail SecurityThreat DetectionAI Powered PhishingPolymorphic Phishinghttps://runtimerebel.com/blog/aegisai-secures-36m-to-combat-bec-with-ai-powered-email-securityhttps://runtimerebel.com/blog/aegisai-secures-36m-to-combat-bec-with-ai-powered-email-securityAegisAI raises $36 million to enhance its AI-driven email security platform, targeting sophisticated Business Email Compromise and phishing campaigns.Fri, 24 Jul 2026 13:51:39 GMTAegisAIEmail SecurityBECAI SecurityCloud Securityhttps://runtimerebel.com/blog/russian-apt-exploits-zimbra-zero-day-to-exfiltrate-mail-and-2fa-codeshttps://runtimerebel.com/blog/russian-apt-exploits-zimbra-zero-day-to-exfiltrate-mail-and-2fa-codesRussian state-supported actors leveraged a Zimbra Zero-Day to steal 90 days of email history and bypass security by exfiltrating 2FA recovery codes.Thu, 23 Jul 2026 21:06:08 GMTZimbraRussian EspionageAPT28Zero-DayEmail Securityhttps://runtimerebel.com/blog/email-account-takeover-via-2fa-compromise-mitigating-identity-theft-riskhttps://runtimerebel.com/blog/email-account-takeover-via-2fa-compromise-mitigating-identity-theft-riskAn identity theft incident highlights how easily email account takeover via compromised 2FA can lead to broader security breaches. Learn to protect your digital identity.Wed, 22 Jul 2026 17:24:17 GMTIdentity TheftAccount Takeover2FA BypassEmail SecurityPhishingSocial Engineeringhttps://runtimerebel.com/blog/apple-patches-hide-my-email-bug-exposing-real-addresses-in-logshttps://runtimerebel.com/blog/apple-patches-hide-my-email-bug-exposing-real-addresses-in-logsApple addresses a privacy flaw in Hide My Email that leaked actual user email addresses in mail logs, undermining the service’s core anonymity features.Tue, 21 Jul 2026 21:11:31 GMTAppleHide My EmailPrivacy VulnerabilityEmail SecurityData Exposurehttps://runtimerebel.com/blog/text-salting-hidden-text-tactics-bypass-ai-email-filtershttps://runtimerebel.com/blog/text-salting-hidden-text-tactics-bypass-ai-email-filtersOver 1 million emails are leveraging text salting techniques, embedding hidden characters to bypass AI and LLM-based email security filters, posing a significant…Thu, 16 Jul 2026 21:02:58 GMTText SaltingPhishingAI SecurityEmail SecurityLLMsObfuscationhttps://runtimerebel.com/blog/finance-executive-email-compromise-via-native-windows-toolshttps://runtimerebel.com/blog/finance-executive-email-compromise-via-native-windows-toolsA monthslong campaign targeted a global stock exchange executive, leveraging native Windows tools for persistence and unauthorized email monitoring.Wed, 03 Jun 2026 13:50:15 GMTFinancial SectorEmail SecurityLiving-off-the-LandM365 Securityhttps://runtimerebel.com/blog/new-phishing-campaign-exploits-svg-attachments-to-evade-filtershttps://runtimerebel.com/blog/new-phishing-campaign-exploits-svg-attachments-to-evade-filtersSecurity researchers report a wave of phishing emails using malicious SVG attachments to deliver scripts and bypass email security gateways. Learn how to defend.Tue, 02 Jun 2026 09:35:03 GMTPhishingSVGMalware DeliverySocial EngineeringEmail Securityhttps://runtimerebel.com/blog/quishing-evasion-malicious-qr-codes-bypassing-security-filtershttps://runtimerebel.com/blog/quishing-evasion-malicious-qr-codes-bypassing-security-filtersA technical analysis of how malicious QR codes (quishing) bypass email security filters and actionable mitigation steps for security operations centers.Mon, 01 Jun 2026 05:43:53 GMTQuishingPhishingEmail SecuritySocial EngineeringEvasion Techniqueshttps://runtimerebel.com/blog/ocean-launches-agentic-ai-email-security-platform-with-28m-fundinghttps://runtimerebel.com/blog/ocean-launches-agentic-ai-email-security-platform-with-28m-fundingOcean emerges from stealth with $28M to deploy specialized AI agents that simulate human reasoning to detect sophisticated phishing and BEC threats.Thu, 21 May 2026 13:21:56 GMTEmail SecurityAgentic AIPhishingBusiness Email CompromiseOcean Securityhttps://runtimerebel.com/blog/outlook-junk-folder-bypass-how-attackers-hide-malicious-urlshttps://runtimerebel.com/blog/outlook-junk-folder-bypass-how-attackers-hide-malicious-urlsDiscover how attackers bypass Microsoft Outlook's Junk folder link preview protection using HTML manipulation to hide malicious phishing URLs from users.Thu, 14 May 2026 09:05:32 GMTMicrosoft OutlookPhishing DefenseEmail SecurityLink Preview BypassHtml Manipulationhttps://runtimerebel.com/blog/amazon-ses-phishing-abuse-evading-security-filters-via-aws-infrastructurehttps://runtimerebel.com/blog/amazon-ses-phishing-abuse-evading-security-filters-via-aws-infrastructureThreat actors are increasingly exploiting Amazon Simple Email Service (SES) to bypass email security filters by leveraging high-reputation AWS domains.Mon, 04 May 2026 20:35:07 GMTAmazon SESPhishingAWS SecurityEmail SecurityCredential Thefthttps://runtimerebel.com/blog/ai-powered-phishing-surges-defending-against-advanced-attackshttps://runtimerebel.com/blog/ai-powered-phishing-surges-defending-against-advanced-attacksExplore the surge in AI-powered phishing, how threat actors are leveraging it for personalized attacks, and critical defensive strategies for organizations.Fri, 24 Apr 2026 16:30:03 GMTAI PhishingSocial EngineeringEmail SecurityCybercrimeThreat Intelligencehttps://runtimerebel.com/blog/apple-id-alerts-abused-for-phishing-via-legitimate-servershttps://runtimerebel.com/blog/apple-id-alerts-abused-for-phishing-via-legitimate-serversThreat actors are exploiting Apple's account notification system to send authentic-looking phishing emails that bypass traditional spam filters and SPF checks.Sun, 19 Apr 2026 16:16:02 GMTApple IdPhishingSocial EngineeringEmail SecuritySpam Bypasshttps://runtimerebel.com/blog/zip-archive-evasion-detecting-malicious-multi-file-payloadshttps://runtimerebel.com/blog/zip-archive-evasion-detecting-malicious-multi-file-payloadsAnalyze how threat actors use ZIP archives containing over 100,000 files to bypass security inspection and overwhelm automated analysis tools.Fri, 27 Mar 2026 04:52:03 GMTEvasion TechniquesMalware DeliveryZIP ArchivesEmail Securityhttps://runtimerebel.com/blog/bubble-platform-abuse-credential-phishing-targets-microsoft-accountshttps://runtimerebel.com/blog/bubble-platform-abuse-credential-phishing-targets-microsoft-accountsThreat actors are abusing the Bubble no-code platform to host sophisticated phishing campaigns, bypassing traditional detection and targeting Microsoft account…Wed, 25 Mar 2026 20:16:59 GMTPhishingCredential TheftMicrosoft AccountsBubble PlatformNo Code SecurityEmail Securityhttps://runtimerebel.com/blog/svg-based-phishing-using-scalable-vector-graphics-for-credential-thefthttps://runtimerebel.com/blog/svg-based-phishing-using-scalable-vector-graphics-for-credential-theftDiscover how threat actors leverage SVG files to bypass email filters and execute credential theft through embedded JavaScript and HTML forms.Wed, 25 Mar 2026 04:43:26 GMTSVG PhishingCredential TheftEmail SecurityObfuscationhttps://runtimerebel.com/blog/abusing-arpa-dns-and-ipv6-to-bypass-phishing-defenseshttps://runtimerebel.com/blog/abusing-arpa-dns-and-ipv6-to-bypass-phishing-defensesThreat actors exploit .arpa domains and IPv6 reverse DNS for phishing evasion, bypassing email security gateways and domain reputation checks.Sun, 08 Mar 2026 16:22:28 GMTPhishingArpaIPv6DNSEmail SecurityEvasionhttps://runtimerebel.com/blog/toad-emails-the-call-this-number-gateway-bypass-threathttps://runtimerebel.com/blog/toad-emails-the-call-this-number-gateway-bypass-threatAttackers use Telephone-Oriented Attack Delivery (TOAD) with 'call this number' emails to bypass gateways, relying on social engineering post-call.Wed, 25 Feb 2026 16:34:30 GMTTOADTelephone Oriented Attack DeliverySocial EngineeringEmail SecurityPhishing