Cloudflare is applying to become a certificate authority, with post-quantum certificates due in 2027. Here's what it means for teams managing TLS certificates.

New analysis finds uneven adoption of enforcement policies across companies, governments and major industries

DNS governance covers the four ways DNS estates fail, what NIS2 and NIST actually require, and a five-stage framework to fix one you didn't build.

Applying basic security principles would go a long way to fixing problems identified by Anthropic and OpenAI, writes Ciaran Martin

The FBI is reportedly investigating cyberattacks targeting key water systems across seven US states. Red Sift director of alliances & partnerships Brian Westnedge examines how businesses and util...

The Federal Bureau of Investigation has issued an official alert warning social media users of scammers impersonating FBI agents. Here’s what you need to know.

Two-thirds of South Carolina’s largest business enterprises leave their computer systems vulnerable to common email scams — a hole that’s helping to enable a cybercrime spree that the FBI says cost st...

As AI starts reading and actioning our inboxes, email authentication becomes the trust layer that the future of email depends on.

Podcast Episode · Trust.ID Talk: The Digital Certificate and Identity Security Podcast · June 4 · 15m

Post-quantum cryptography is changing email security, but not in the way most think. Learn why DKIM's risk is different and where to focus your efforts now.

DMARCbis is now the new DMARC. RFC 9989 moves DMARC to Proposed Standard. Here's what changed technically, and what you need to act on or leave alone.

We benchmarked 12 LLM configurations on Radar Lite's security summarization task. Frontier models led, but mid-tier options came surprisingly close at a fraction of the cost.

It’s been a little more than a decade since the Sony hack unleashed the email inboxes of top executives and saw multiple finished movies dropped into the public domain exposing cybersecurity as one…

Massachusetts lost more than $664,000 in 2024 from phishing attacks alone.

Criminals stole $400,000 of lobster destined for Costco by impersonating a legitimate trucking company. Red Sift Brand Trust could have detected the lookalike domain registration in real-time and prev...

Porch pirates are using inexpensive electronic gadgets to jam the Wi-Fi connection to a home’s security camera.

The IETF has published a draft recommending that ARC (Authenticated Received Chain) be marked "Obsolete" after a 10-year experiment. Here's what it means for your organization.

BEC losses hit $6B in 2024, yet most domains lack DMARC. Treat email as a strategic risk — enforce DMARC in 2026 to stay protected.

SVG files are designed to be harmless image files. Yet attackers have discovered they can hide JavaScript inside an SVG’s XML code and trick email gateways.

A new phishing campaign uses SVG files for JavaScript redirects, bypassing traditional detection methods

Red Sift has expanded its partnership with Cisco to include Red Sift Brand Trust, enabling exact and lookalike domain defense within CDP.

Cloudflare customers now benefit from Red Sift OnDMARC—ranked #1 in Europe and EMEA by G2—strengthening their defenses against advanced phishing and email-based threats.

Microsoft has set May 5 as the deadline for bulk email compliance. In this Tech Tip, we show how organizations can still make the deadline.

DMARCbis, also known as DMARC 2.0, is the forthcoming update to the DMARC email authentication protocol with an expectation to be finalized and published in 2025.

TLS certificates are about to get significantly shorter-lived. Starting 15 March 2026, newly issued public-trust certificates will max out at 200 days, dropping to 47 days by 2029.

Email authentication isn't just an IT concern. It protects your brand and customers. A single misstep can let attackers spoof your domain. One of the most dangerous methods? The DKIM replay attack.

Microsoft to enforce strict email authentication rules for Outlook.com users on May 5 — what you need to know.

On April 16, 2025, Zoom experienced a significant global outage that disrupted video conferencing services and access to its website for thousands of users.

Learn about the challenges facing organizations, why traditional defenses fall short, and why DMARC should be your priority.

Red Sift is now working with Jisc—the UK’s not-for-profit provider of digital and technology services for education and research. As part of this collaboration, Red Sift OnDMARC is now available to pu...

Check out Mailgun's podcast, Email's Not Dead. Listen to industry experts and email geeks discuss and debate topics impacting email and how we communicate.

Introduction In an era where email remains one of the most widely used tools for personal and business communications, Outlook is stepping up its commitment...

Mailgun now offers free DMARC reporting in partnership with Red Sift, giving senders actionable insights to protect domains, prevent spoofing, and boost deliverability.

Logo detection is crucial for brand protection, helping identify logo misuse in lookalike domains and fraudulent activities.

Since its inception, Let’s Encrypt has been sending expiration notification emails to subscribers that have provided an email address to us. We will be ending this service on June 4, 2025. The d...