FreeBSD : exim -- Remote Code Execution (f99a4686-e694-11e3-9032-000c2980a9f3)

The exim development team reports : When built with DMARC support, 4.82 is vulnerable to a remote code exeuction flaw. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated security patch has been cancelled. Disabled on 2014/06/02. C Tenable Network Security, Inc. Th...

Yahoo's New DMARC Policy Destroys Every Mailing List across the World

Yahoo! The one who enabled the HTTPS connections by default from the beginning of this year, the one who encrypts traffic moving between its data centers from 31st March, now has been accused of harming every Mailing List across the world. Experts from the Internet Engineering Council John R...

Twitter added DMARC support to prevent email phishing

Twitter announced via its blog today that it has begun using a new method called Domain-based Message Authentication, Reporting and Conformance DMARC to help prevent email phishing. DMARC is actually a standard for preventing email spoofing, in order to make it harder for attackers to send phishi...

Twitter added DMARC support to prevent email phishing

Twitter announced via its blog today that it has begun using a new method called Domain-based Message Authentication, Reporting and Conformance DMARC to help prevent email phishing. DMARC is actually a standard for preventing email spoofing, in order to make it harder for attackers to send phishi...

Facebook Privacy Vulnerability Create Private Messages from Anyone

Facebook's DMARC fail! Facebook Privacy Vulnerability! This is private exploit. You can buy it at https://0day.today...

M3AAWG Recommends New DKIM Best Practices

The Messaging, Malware and Mobile Anti-Abuse Working Group on Tuesday recommended businesses replace 512- and 768-bit verification keys with 1024-bit or higher encryption to counter a current vulnerability that allows the shorter keys to be cracked within 72 hours using cheap cloud-based services...

Google, Facebook and Others Join to Write New Email-Authentication Spec Called DMARC

Google, Yahoo, AOL and a group of other large email senders and receivers have banded together to develop a new framework for sending and receiving email that is designed to stop phishing attacks and other email-borne scams. Called DMARC.org, the new group has come up with a specification called...