Email spoofing attacks are still a major threat for FTSE 100 companies - despite a simple fix being widely available
Briefly

Research by Hornetsecurity reveals that over a third of FTSE 100 companies are still susceptible to email spoofing attacks. This vulnerability persists despite the availability of DMARC tools designed to authenticate emails and protect against fraud. Romain Basset of Hornetsecurity emphasizes that the issues stem from a lack of understanding about configuring DMARC properly. He cautions that the absence or misconfiguration of DMARC allows attackers to exploit businesses, compromising both employees and customers through fraudulent emails. Correct implementation is complicated by the use of multiple platforms and subsidiaries in different domains.
Almost a third of FTSE 100 organizations remain vulnerable to email spoofing, as they poorly implement DMARC despite its availability.
DMARC helps recipients know how to handle emails when authentication fails, but many companies lack this understanding, leading to vulnerabilities.
Hornetsecurity found that over 30% of FTSE 100 companies have improperly configured DMARC, exposing them to significant cyber risks.
Companies struggle to configure DMARC correctly due to the complexities of varied systems, platforms, and authorized senders, leaving them open to attacks.
Read at IT Pro
[
|
]