Hacker News with Generative AI: Email Security

FBI: Spike in Hacked Police Emails, Fake Subpoenas (krebsonsecurity.com)
The Federal Bureau of Investigation (FBI) is urging police departments and governments worldwide to beef up security around their email systems, citing a recent increase in cybercriminal services that use hacked police email accounts to send unauthorized subpoenas and customer data requests to U.S.-based technology companies.
SMTP Downgrade Attacks and MTA-STS (alexsci.com)
In this post, I audit several prominent mail providers to discover how they handle email encryption and show how MTA-STS can help improve email security.
Emails encryption at rest on OpenBSD using dovecot and GPG (dataswamp.org)
So the Department of Energy emailed me (haxx.se)
Apple Intelligence beta flagged a phishing email as "Priority" (panic.com)
Phishing Campaign Exploits Proofpoint to Send Spoofed Emails (guard.io)
Crooks Bypassed Google's Email Verification to Create Workspace Accounts, Acces (krebsonsecurity.com)
Microsoft tells yet more customers their emails have been stolen (theregister.com)
Microsoft Alerts More Customers to Email Theft in Expanding (securityweek.com)
Telegram Combolists and 361M Email Addresses (troyhunt.com)
BIMI and DMARC Can't Save You: The Overlooked DKIM Exploit (zone.eu)
Protecting your email address via SVG instead of JavaScript (rouninmedia.github.io)
DKIM, SPF, SpamAssassin Email Validator (dkimvalidator.com)
Test and learn how DMARC, SPF and DKIM work (dmarctester.com)
CISA Emergency Directive: Nation-State Compromise of Microsoft Corporate Email (cisa.gov)