A no-click exploit jumps from Zimbra to Exchange OWA, Google confirms the full Gmail third-party teardown, ten years of DNS data, and Chrome's plot to kill the verification email.
Independent coverage of the full email ecosystem. This Week: Russian state hackers spent a year inside Zimbra webmail — no click required. Amazon is walking away from hosted business email entirely. Substack just bet its brand on detecting AI-written newsletters.
Independent coverage of the full email ecosystem. This week: APRF: an IETF draft proposing daily inbox placement reports from mailbox providers — Comcast is already running a beta. Also: beehiiv's Summer Release, Apple's Hide My Email lawsuit, CEMA update.
Independent coverage of the full email ecosystem. This week: Infobip just bought the industry's self-declared "neutral control layer," the CNIL's pixel-consent grace period expired yesterday, and the device-code phishing technique we flagged last week is now a $400/month subscription product.
Independent coverage of the full email ecosystem. This Week: Apple's flagship privacy feature has a hole it's known about for a year. DKIM2 and DMARCbis just got their first running code. The operators behind the biggest phishing platform ever taken down are back with a technique email authenticati
Independent coverage of the full email ecosystem. This Week: A ransom email gets past SPF, DKIM and DMARC! France's CNIL tracking-pixel deadline is two weeks out.
Independent coverage of the full email ecosystem. A week where Microsoft, Google, Apple, and the State of Washington all moved at once.
Independent coverage of the full email ecosystem. This week: Chinese-linked UNC6508 weaponized Google Workspace's own mail rules for a year-long exfiltration campaign. Gmail's Postmaster Tools now shows a plain-English verdict. Béis faces three Washington CEMA suits over "Fraud Alert" subject lines.
Independent coverage of the full email ecosystem. This week: M3AAWG in Montreal this week; Washington's email subject-line law takes effect Thursday
Independent coverage of the full email ecosystem. This week: ARC is moving to Historic, the CNIL deadline is six weeks out, Microsoft just rewrote half your postmaster scripts, and 42 million European mailboxes are now rejecting at the door.
Independent coverange of the full email ecosystem. This Week: DMARCbis Is Official, Mailchimp Is Shrinking, and Your Gmail Open Rates Are Probably Wrong
Independent coverage of the full email ecosystem. This week: DMARC's replacement has a readable draft. Postmark swapped MTA stacks and published the cost. DKIM2 has a platform infrastructure catch. Gmail's Gemini changes inbox visibility.
Independent coverage of the full email ecosystem. This week: GMX/WEB.DE/mail.com (42M users) now enforce DMARC p=reject. IETF retires ARC as Historic. Microsoft Q1: QR phishing up 146%, Tycoon2FA disrupted. Klaviyo MCP lets Claude run campaigns unattended.
Independent coverage of the full email ecosystem. This week: Authentication is dominating the conversation right now. DKIM2 crossed from "IETF draft" into active practitioner concern this week, with both Spam Resource and Word to the Wise publishing deep-dives in the same news cycle. Meanwhile, Mi
Independent coverage of the full email ecosystem. This week: Authentication is dominating the conversation right now. DKIM2 is moving faster than anyone expected, Microsoft's SMTP AUTH deadline hits in two days, and double-header bugs are causing real-world rejections at Microsoft that slide past Gm
Independent coverage of the full email ecosystem. This week: Delivered doesn't mean seen anymore. And Apple just broke click attribution — on purpose.
CNIL rules tracking pixels need separate consent. Apple launches B2B email. FBI: BEC cost $3B. Microsoft auth deadline April 30. Gmail AI burying 40% of inbox.
Your Independent Email Industry Roundup. This week: AI-generated phishing that bypasses MFA entirely, a deep dive on DKIM2 (the biggest change to email auth since DMARC), Gmail's AI Inbox goes live at $250/mo, Apple launches business email, Amazon kills WorkMail, and Washington cuts its spam law da
Your Independent Email Industry Roundup
Your Independent Email Industry Roundup. March 25, 2026: Proofpoint, IRONSCALES, and Darktrace all shipped AI agent-based email security at RSAC 2026. Plus: Forrester names new EMSP Leaders, Lululemon fined $700K for spam in Australia, Microsoft OAuth phishing targets government orgs, and Validity's
Your Independent Email Industry Roundup. This week, Microsoft Exchange went down globally and Outlook.com is rejecting legitimate email. Plus: Tycoon 2FA takedown, a phishing trick that fools AI filters, and Google tightens DKIM validation.
Gmail's AI inbox is about to change everything. Plus: NCSC deadline, Microsoft kills Basic Auth, SFMC fallout continues, and DMARCbis nears the finish line.