A critical SQL injection vulnerability in Cisco Secure Email Gateway allows unauthenticated remote attackers to execute arbitrary commands with root privileges by sending crafted emails. Cisco has released software updates to address the flaw, with no workarounds available. Administrators should review mail logs for suspicious SQL statements and check network/firewall logs for indicators of compromise.
ProofOfDonation is a self-hosted alternative to CAPTCHAs that verifies user identity by confirming charitable donations through email receipt validation using DKIM cryptographic signatures. Website owners can replace signup puzzles with donation requirements, and the stateless server supports multiple charities without direct integration.
Anomalously high email open rates—exceeding 100%—can indicate compromised accounts rather than successful campaigns. Attackers exploit DKIM replay by sending one authenticated message through a legitimate account, then redistributing that signed message to thousands of recipients, causing the tracking pixel to fire far more times than the original recipient count, creating mathematically impossible open-rate metrics.
Gmail AI Threat Scanner is a lightweight Google Apps Script extension that monitors incoming emails for security threats using AI-powered anomaly detection. It operates in two modes: an automated background scan that runs every minute to label emails as AI-Safe, AI-Suspicious, or AI-Malicious, and an interactive sidebar that displays detailed risk scores and red flags when reading individual emails. Designed for personal Gmail accounts only, it requires no external infrastructure and operates under the user's own API key.