email – Noise

Improving email security with Amazon SES Mail Manager and Hornetsecurity’s Vade Advanced Email Security Add On

Zip Zieper — Fri, 21 Mar 2025 19:38:54 +0000

Email continues to be a critical communication channel for businesses, powering essential communications across time zones and locations. But as cyber threats grow more sophisticated, how can organizations protect their most vulnerable communication channel? With the increasing complexity of email-based security risks, businesses need robust solutions to safeguard their digital communications. Today, we’re excited to […]

Automate the Creation & Rotation of Amazon Simple Email Service SMTP Credentials

Zip Zieper — Tue, 11 Mar 2025 05:47:00 +0000

[Amazon Simple Email Service] provides a secure email solution that scales with your business needs. Unfortunately, all email systems, including Amazon SES, remain the primary target for spammers and bad actors due to email’s widespread use and accessibility. While SES offers powerful features for application-based email sending, its SMTP credentials require careful management to prevent […]

How to Make Simple Email Service Resilient Across Two AWS Regions with Global Endpoints

Zip Zieper — Wed, 11 Dec 2024 21:10:29 +0000

Introduction Amazon Simple Email Service (SES) recently announced Global Endpoints, a major enhancement to its email sending features. This new capability improves the availability and reliability of SES API v2 email sending workloads by automatically distributing messages, in an active/active configuration across the Primary and Secondary AWS regions. When Global Endpoints detects degradation in either […]

Build a Two-Way Email-to-SMS Service with Amazon SES and Amazon End User Messaging

Cheng Wang — Mon, 04 Nov 2024 16:18:44 +0000

Introduction Businesses and organizations today struggle to effectively communicate with their customers, employees, or other stakeholders across the diverse range of digital channels they now use. One common problem arises when the requirement to exchange information quickly and reliably extends beyond traditional email. This issue challenges organizations where recipients lack immediate access to email. This […]

Leverage IAM Roles for email sending via SES from EC2 and eliminate a common credential risk

Zip Zieper — Fri, 27 Sep 2024 19:22:13 +0000

Sending automated transactional emails, such as account verifications and password resets, is a common requirement for web applications hosted on Amazon EC2 instances. Amazon SES provides multiple interfaces for sending emails, including SMTP, API, and the SES console itself. The type of SES credential you use with Amazon SES depends on the method through which you are […]

Celebrating one year of Project Cybersafe Schools

Zaid Zaid — Thu, 08 Aug 2024 13:00:25 +0000

August 8, 2024, marks the first anniversary of Project Cybersafe Schools, Cloudflare’s initiative to provide small K-12 public school districts in the United States with a package of Zero Trust cybersecurity solutions – for free, and with no time limit

How to use Mail Manager to Archive Inbound Emails

Sesan Komaiya — Mon, 24 Jun 2024 23:24:37 +0000

In today’s digital landscape, where email communication plays a vital role in business operations, Keeping your email archive secure, compliant, and retrievable is crucial for any business. However, managing the large volume of email data can lead to operational difficulties, including regulatory compliance, maintaining an audit trail, and preventing data loss. That’s where Amazon Simple […]

Email Archiving with Mail Manager: Why To Archive In Transit vs At The Mailbox

Zip Zieper — Mon, 24 Jun 2024 22:27:55 +0000

When designing Amazon Simple Email Service’s (SES) Mail Manager, we often heard from customers about the “PST-file problem” inherent with user-side mailbox-based archiving. This occurs when, for a variety of reasons, end users decide to archive their emails to local PST files or other local storage. These PST files are fragile and easily corrupted. Furthermore, […]

How Amazon SES Mail Manager Elevates Email Security and Efficiency

Pavlos Ioannou Katidis — Mon, 10 Jun 2024 18:47:46 +0000

In today’s digital landscape, efficient and secure email management is essential for businesses facing the complexities of cyber threats and regulatory compliance. Companies are seeking ways to safeguard against unauthorized access and apply audit rules, while maintaining operational efficiency. Amazon SES Mail Manager is designed to meet these challenges, offering a suite of features that […]

The Four Pillars of Managing Email Reputation

Dustin Taylor — Wed, 15 May 2024 21:22:53 +0000

Introduction A sender’s domain and IP reputation strongly indicate email deliverability success. Maintaining a high reputation ensures optimal recipient inboxing. This blog outlines how Amazon SES protects its network reputation to help customers deliver high-quality email consistently. Understanding sender reputation nuances across diverse mailbox providers can be challenging, making issue identification and root cause analysis […]

How Cloudflare Cloud Email Security protects against the evolving threat of QR phishing

Pete Pang — Wed, 17 Apr 2024 13:00:44 +0000

Learn about how Cloudflare's Cloud Email Security tackles QR phishing, why attackers favor QR codes, and Cloudflare's proactive defense strategy against evolving threats

An introduction to Amazon WorkMail Audit Logging

Zip Zieper — Tue, 09 Apr 2024 17:53:01 +0000

Amazon WorkMail’s new audit logging capability equips email system administrators with powerful visibility into mailbox activities and system events across their organization. As announced in our recent “What’s New” post, this feature enables the comprehensive capture and delivery of critical email data, empowering administrators to monitor, analyze, and maintain compliance. With audit logging, WorkMail records […]

US Cyber Safety Review Board on the 2023 Microsoft Exchange Hack

Bruce Schneier — Tue, 09 Apr 2024 13:56:55 +0000

The US Cyber Safety Review Board released a report on the summer 2023 hack of Microsoft Exchange by China. It was a serious attack by the Chinese government that accessed the emails of senior US government officials.

From the executive summary:

The Board finds that this intrusion was preventable and should never have occurred. The Board also concludes that Microsoft’s security culture was inadequate and requires an overhaul, particularly in light of the company’s centrality in the technology ecosystem and the level of trust customers place in the company to protect their data and operations. The Board reaches this conclusion based on:...

Security Vulnerability of HTML Emails

Bruce Schneier — Mon, 08 Apr 2024 11:03:44 +0000

This is a newly discovered email vulnerability:

The email your manager received and forwarded to you was something completely innocent, such as a potential customer asking a few questions. All that email was supposed to achieve was being forwarded to you. However, the moment the email appeared in your inbox, it changed. The innocent pretext disappeared and the real phishing email became visible. A phishing email you had to trust because you knew the sender and they even confirmed that they had forwarded it to you.

This attack is possible because most email clients allow CSS to be used to style HTML emails. When an email is forwarded, the position of the original email in the DOM usually changes, allowing for CSS rules to be selectively applied only when an email has been forwarded...

From .com to .beauty: The evolving threat landscape of unwanted email

João Tomé — Tue, 26 Mar 2024 13:00:20 +0000

In this 2023-early 2024 email analysis, we examine how certain generic Top-Level Domains (TLDs) are primarily used for spam and phishing, and their evolution over a year. There are many trends in email threats to examine.

Upgrade Your Email Tech Stack with Amazon SESv2 API

Zip Zieper — Fri, 15 Mar 2024 15:17:34 +0000

Amazon Simple Email Service (SES) is a cloud-based email sending service that helps businesses and developers send marketing and transactional emails. We introduced the SESv1 API in 2011 to provide developers with basic email sending capabilities through Amazon SES using HTTPS. In 2020, we introduced the redesigned Amazon SESv2 API, with new and updated features […]

Launching email security insights on Cloudflare Radar

David Belson — Fri, 08 Mar 2024 14:00:58 +0000

The new Email Security section on Cloudflare Radar provides insights into the latest trends around threats found in malicious email, sources of spam and malicious email, and the adoption of technologies designed to prevent abuse of email

Don’t Let the Cyber Grinch Ruin your Winter Break: Project Cybersafe Schools protects small school districts in the US

Zaid Zaid http://blog.cloudflare.com/author/zaid-zaid/ — Wed, 20 Dec 2023 14:00:29 +0000

In August of this year, as part of the White House Back to School Safely: K-12 Cybersecurity Summit, Cloudflare announced Project Cybersafe Schools to help support eligible K-12 public school districts with a package of Zero Trust cybersecurity solutions — for free, and with no time limit

Project Cybersafe Schools: Bringing security tools for free to small K-12 school districts in the US

Zaid Zaid — Tue, 08 Aug 2023 13:00:12 +0000

Announced as part of the Back to School Safely: K-12 Cybersecurity Summit at the White House on August 7, Project Cybersafe Schools will support eligible K-12 public school districts with a package of Zero Trust cybersecurity solutions — for free, and with no time limit

How quirion created nested email templates using Amazon Simple Email Service (SES)

Dominik Richter — Tue, 18 Jul 2023 15:15:19 +0000

This is part two of the two-part guest series on extending Simple Email Services with advanced functionality. Find part one here. quirion, founded in 2013, is an award-winning German robo-advisor with more than 1 billion Euro under management. At quirion, we send out five thousand emails a day to more than 60,000 customers. Managing many […]