Email security guy at www.redsift.com from Boulder, CO. I like music, travel, dogs, beer and sports. I dislike crazy social platforms.https://bsky.app/profile/bwestnedge.bsky.socialhttps://bsky.app/profile/bwestnedge.bsky.social/post/3mu3o3jtdvs2oNew research from @redsift.com reveals only 38.4% of leading U.S. orgs have full DMARC enforcement, while AI is making phishing faster and harder to spot. Critical infrastructure is especially exposed. Email authentication can't be an afterthought. https://vmblog.com/news/midyear-2026-email-security-gaps-persist-as-ai-raises-impersonation-risk/27 Aug 2026 20:16 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mu3o3jtdvs2ohttps://bsky.app/profile/bwestnedge.bsky.social/post/3mu3kaeq7dk2chttps://redsift.com/guides/dns-governance27 Aug 2026 19:07 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mu3kaeq7dk2chttps://bsky.app/profile/bwestnedge.bsky.social/post/3mttr5f6po22chttps://www.economist.com/by-invitation/2026/08/23/fears-of-ai-induced-armageddon-are-overdone24 Aug 2026 16:49 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mttr5f6po22chttps://bsky.app/profile/bwestnedge.bsky.social/post/3ms7fx3n64k24Quick hit on Yahoo finance commenting on the recent Iranian attacks on critical water infrastructure and other topics: https://uk.finance.yahoo.com/video/cyberattacks-businesses-avoid-being-soft-203912360.html03 Aug 2026 21:11 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3ms7fx3n64k24https://bsky.app/profile/bwestnedge.bsky.social/post/3mregb5dh2c2jThe FBI has issued an updated warning about scammers posing as agents on socials. Fraudsters clone the IC3 fraud-reporting site and use AI-generated content to target people who've already been scammed with fake recovery offers. I added a few comments https://www.forbes.com/sites/daveywinder/2026/07/21/fbi-issues-new-fake-feds-warning-for-social-media-users/24 Jul 2026 03:34 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mregb5dh2c2jhttps://bsky.app/profile/bwestnedge.bsky.social/post/3mpygnxj2rc2bEmail wasn't designed with security in mind, and attackers know it. As AI makes phishing cheaper and easier to scale, #DMARC and #BIMI are becoming baseline defenses — not nice-to-haves. https://www.helpnetsecurity.com/2026/07/06/ciso-email-security-strategy/06 Jul 2026 15:44 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mpygnxj2rc2bhttps://bsky.app/profile/bwestnedge.bsky.social/post/3mp7aufi6wc2u🚨 65% of South Carolina's largest companies lack full DMARC protection — and cybercrime cost state residents $264M last year, per a new report from @redsift.com. With AI supercharging phishing scams, email security has never mattered more. #Cybersecurity #DMARC https://charlestoncitypaper.com/2026/06/26/s-c-companies-lag-on-security-as-cybercrime-losses-soar/26 Jun 2026 15:24 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mp7aufi6wc2uhttps://bsky.app/profile/bwestnedge.bsky.social/post/3moxqm4tybc2eYou can't migrate cryptography you can't see. 🔐 With new federal PQC deadlines (2030-2031) and Google targeting 2029, the time to map your PKI estate is NOW — not when the algorithm swap begins. Start with discovery. redsift.com/blog/post-quan…23 Jun 2026 15:44 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3moxqm4tybc2ehttps://bsky.app/profile/bwestnedge.bsky.social/post/3mo4f7sot6c2cAI assistants are now reading and acting on your emails. That makes #DMARC enforcement more critical than ever since a spoofed message that fools a human is even more dangerous when it fools an AI. The future of email trust is what we work on every day @redsift.com https://www.fastmail.com/blog/the-future-of-email/12 Jun 2026 18:39 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mo4f7sot6c2chttps://bsky.app/profile/bwestnedge.bsky.social/post/3mnkfymyrsk2pGreat convo with Steve Hall from GlobalSign about email authentication and why it matters more now than ever in an AI world. With BIMI and Common Mark Certificates, organizations of any size can add a verified logo to their messages in the inbox. Apple: apple.co/4oaFDA3 Spotify: bit.ly/4uXqQva https://apple.co/4oaFDA305 Jun 2026 15:05 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mnkfymyrsk2phttps://bsky.app/profile/bwestnedge.bsky.social/post/3mnfcyhyq2226I add some comments to how hackers tricked Meta's Instagram AI support chatbot into handing over access to high-profile accounts, including the dormant Obama White House page, by bypassing identity checks. https://money.usnews.com/investing/news/articles/2026-06-03/analysis-high-profile-meta-ai-chatbot-breach-spotlights-security-risks-of-automation03 Jun 2026 14:28 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mnfcyhyq2226https://bsky.app/profile/bwestnedge.bsky.social/post/3mn3bbk2a6c24Post-quantum crypto matters for email — but DKIM's risk isn't "store now, decrypt later." It's future forgery. Fix your DKIM/DMARC basics now, and focus PQ efforts on TLS, VPNs & encrypted archives first. #dmarc #emailsecurity https://redsift.com/blog/dkims-post-quantum-risk-is-different via @redsift.com30 May 2026 14:30 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mn3bbk2a6c24https://bsky.app/profile/bwestnedge.bsky.social/post/3mmykv75ur22aOne Job That Is Growing in the A.I. Era? Cybersecurity Experts. Demand for security engineers has surged as artificial intelligence generates a glut of new code and models like Anthropic’s Mythos create new concerns.https://www.nytimes.com/2026/05/24/technology/ai-cybersecurity-jobs.html https://www.nytimes.com/2026/05/24/technology/ai-cybersecurity-jobs.html?emc=edit_ot_20260528&nl=on-tech&segment_id=22062129 May 2026 12:44 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mmykv75ur22ahttps://bsky.app/profile/bwestnedge.bsky.social/post/3mmhbzgkotc2uBig email security update! The IETF published RFC 9989, officially moving DMARC to a Proposed Standard. Key changes: 🛑 The pct (percentage) tag is dead. 🌲 Public Suffix Domains now use a DNS Tree Walk. 📊 Reporting is split into RFC 9990 & 9991. #DMARC #Infosec #IETF https://redsift.com/blog/dmarc-rfc-998922 May 2026 15:50 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mmhbzgkotc2uhttps://bsky.app/profile/bwestnedge.bsky.social/post/3mlwhqqo5mc2mA look behind the scenes on our work benchmarking smaller AI models vs the big boys for large-scale security analysis. The scores come in a lot closer than expected https://redsift.com/blog/benchmarking-llms-real-security-task15 May 2026 23:18 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mlwhqqo5mc2mhttps://bsky.app/profile/bwestnedge.bsky.social/post/3mk4b6krz622aWhat does email have to do with the "Legend of Aang" leak? Read on: https://pagesix.com/2026/04/21/hollywood/80m-film-leak-hits-paramount-as-explosive-report-reveals-hollywood-is-terrifyingly-exposed-to-hackers/22 Apr 2026 19:46 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mk4b6krz622ahttps://bsky.app/profile/bwestnedge.bsky.social/post/3mim3zrl5e22rProvided some commentary for this article: https://www.axios.com/local/boston/2026/04/03/massachusetts-phishing-email-security03 Apr 2026 16:06 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mim3zrl5e22rhttps://bsky.app/profile/bwestnedge.bsky.social/post/3mbccrhbxxc2aProactive brand monitoring is essential for protecting not just an organization, but its entire supply chain from these type of attacks https://redsift.com/resources/blog/how-brand-monitoring-could-have-prevented-the-costco-lobster-heist via @redsift.com31 Dec 2025 16:43 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3mbccrhbxxc2ahttps://bsky.app/profile/bwestnedge.bsky.social/post/3m7netz66ik2hA pause on my normal commentary on email and phishing for a consumer alert ;-) https://www.azfamily.com/2025/12/10/porch-pirates-using-wi-fi-jamming-technology-disable-security-cameras/10 Dec 2025 15:30 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3m7netz66ik2hhttps://bsky.app/profile/bwestnedge.bsky.social/post/3m73ppeei222wThe end of the line for Authenticated Received Chain (ARC) https://redsift.com/resources/blog/ietf-calls-for-end-of-arc-experiment-what-it-means-for-email-authentication via @redsift.com03 Dec 2025 14:56 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3m73ppeei222whttps://bsky.app/profile/bwestnedge.bsky.social/post/3m4qedqt2rk2cMost Penn domains are open to spoofing and phishing from a DMARC perspective: https://www.msn.com/en-us/money/careers/penn-is-investigating-a-fraudulent-email-breach/ar-AA1PCqbd03 Nov 2025 15:43 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3m4qedqt2rk2chttps://bsky.app/profile/bwestnedge.bsky.social/post/3m33z5qys6223DMARC is a rare control that removes an entire class of malicious email, helps companies remain compliant with new email requirements, and should be the center of an email security plan for 2026. https://www.darkreading.com/cybersecurity-operations/closing-the-gap-why-enforce-dmarc-in-2026 via @redsift.com13 Oct 2025 20:04 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3m33z5qys6223https://bsky.app/profile/bwestnedge.bsky.social/post/3lvbi5zjbec25Let's meet up at @blackhatevents.bsky.social to discuss how we can leverage @redsift.com AI-powered cybersecurity solutions and data for your company and explore strategic and technical partnership opportunities! Book a meet or let's connect at a social event! https://calendly.com/d/cs4j-8d2-xdy/red-sift-meeting-at-black-hat31 Jul 2025 15:45 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3lvbi5zjbec25https://bsky.app/profile/bwestnedge.bsky.social/post/3lu3u3qh36s2jhttps://blog.redsift.com/email/svgs-with-javascript-are-bypassing-traditional-email-security-learn-how-to-stay-secure/16 Jul 2025 16:37 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3lu3u3qh36s2jhttps://bsky.app/profile/bwestnedge.bsky.social/post/3ltzjduhqpk23The emails...are sent using spoofed addresses or domains that mimic legitimate brands. Many of the recipient domains lacked proper email authentication controls, including: No DKIM records Missing or unenforced DMARC policies Misconfigured SPF settings https://www.infosecurity-magazine.com/news/hackers-svg-files-javascript/15 Jul 2025 18:20 +0000at://did:plc:e7mfoh4cbhssodjcirsixlf7/app.bsky.feed.post/3ltzjduhqpk23