Latest
View all articlesEight eMudhra CA keys were compromised. Here is what it means for you
Eight eMudhra intermediate CA keys could be recovered from their public certificates. Here's who is affected, what we found, and what to do now.
Read moreCritical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619: what you need to know
Two PHP vulnerabilities with CVSS scores of 9.2 can allow unauthenticated remote code execution on web servers. Here's how they work, who's exposed, what to patch, and what we've already done for Red Sift Hardenize customers.
Read moreBIMIWebinar recap: Building up to BIMI with Mailgun and Red Sift
Missed our BIMI webinar with Mailgun? Here's how SPF, DKIM, and DMARC enforcement lead to BIMI, what certificates cost, and how BIMI Maker helps.
Read moreCertificatesCloudflare certificate authority: what it means for you
Cloudflare is applying to become a certificate authority, with post-quantum certificates due in 2027. Here's what it means for teams managing TLS certificates.
Read moreIntroducing Red Sift BIMI Maker, a first-of-its-kind mark certificate tool
Red Sift BIMI Maker takes your logo from an image file to a filed BIMI certificate application, streamlined through either a Verified Mark Certificate (VMC) or Common Mark Certificate (CMC).
Read morepost-quantumA closer look at the performance of ML-KEM
ML-KEM barely moves the CPU needle, but it adds real bytes to every TLS handshake. Here's what changes when hybrid key establishment goes live.
Read moreCompany NewsRed Sift now integrates email authentication data into Microsoft Sentinel
Red Sift OnDMARC now streams forensic data and audit logs into Microsoft Sentinel, so security teams can investigate email authentication inside their SIEM.
Read moreEmail SecurityUS DMARC adoption: 5,000 domains ranked by state
Red Sift analyzed DMARC adoption across 5,000 US domains in 49 states and D.C. Only 38.4% block spoofed email. See the full state ranking and sector data.
Read morepost-quantumEffect of post-quantum algorithms on networking performance
ML-KEM and ML-DSA don't cost much extra CPU, but they add real round trips. Here's how post-quantum handshakes change TLS latency, congestion windows, and middlebox behavior.
Read morepost-quantumPost-quantum key establishment, ten years later
Post-quantum key establishment is now standard in TLS 1.3, but only 11% of origin servers are protected. Here's where hybrid ML-KEM adoption really stands.
Read moreDNSHow open zone transfers expose your internal network
An open DNS zone transfer hands attackers a map of your network in one query. Here's what it reveals, and how Red Sift ASM keeps your organization safe.
Read moreExplore more articles
Email Security Weekly
October 12, 2026
What's happening in email security: October 5 - October 11, 2026
Nikkei's compromised mailbox sends 9,000 phishing emails, attackers hijack three ccTLD registries for real Google certificates, and AI-polished invites front a Google AitM kit.
Read issue
October 5, 2026
What's happening in email security: September 28 - October 4, 2026
Forged iCloud senders passed DMARC, a p=none policy waved a China-nexus spear-phish into the inbox, and a FortiMail zero-day was exploited before fixed builds shipped.
Read issue
September 28, 2026
What's happening in email security: September 21 - September 27, 2026
Microsoft disrupts the EvilTokens device-code phishing service, a pre-auth Roundcube flaw patched in May is now reported exploited, and a leaked GitLab email address can push code to main.
Read issue