Saturday , February 15 2025
Google yahoo

Google’s New Email Requirements For 2024
February 1, 2024: A Date All Email Senders Should Care About

If your organization sends a large number of emails to Google and Yahoo accounts, there’s an important date to remember: February 1st. On this day, it is important to be aware if you are sending more than 5000 emails daily to Google and Yahoo mailboxes.

So, What Is the Issue?

Xploit_Cr3w and Blind_Virus, champion for BCS CTF contest

Xploit_Cr3w and Blind_Virus are the two champion teams categorically for BCS ICT Fest 2025 arranged jointly by BCS and BUET....
Read More
Xploit_Cr3w and Blind_Virus, champion for BCS CTF contest

Salt Typhoon Exploits Vulnerable Cisco Devices of Telcoms Globally

Between December 2024 and January 2025, Recorded Future's Insikt Group discovered a campaign targeting unpatched Cisco devices used by major...
Read More
Salt Typhoon Exploits Vulnerable Cisco Devices of Telcoms Globally

CISA Releases Advisories For 20 Industrial Control Systems (ICS)

On February 13, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) issued 20 advisories about serious vulnerabilities in Industrial Control...
Read More
CISA Releases Advisories For 20 Industrial Control Systems (ICS)

“Astaroth” Phishing Kit Bypasses 2FA Of Gmail, Yahoo, AOL, M365

The new Astaroth Phishing Kit can bypass two-factor authentication to steal login credentials for Gmail, Yahoo, and Microsoft. It uses...
Read More
“Astaroth” Phishing Kit Bypasses 2FA Of Gmail, Yahoo, AOL, M365

CVE-2023-38831
Malware campaign target Bangladeshi Government Entities: Report

A sophisticated malware campaign is targeting military and government entities in Bangladesh. It uses social engineering to deliver malicious files...
Read More
CVE-2023-38831  Malware campaign target Bangladeshi Government Entities: Report

(CVE-2025-1146
CrowdStrike Fixed High-Severity TLS Vuln in Falcon Sensor

CrowdStrike has issued a security advisory for a serious TLS vulnerability, CVE-2025-1146, in its Falcon Sensor for Linux, Falcon Kubernetes...
Read More
(CVE-2025-1146  CrowdStrike Fixed High-Severity TLS Vuln in Falcon Sensor

CVE-2025-0108 & CVE-2025-0110
Palo Alto Networks Addressed High-Severity PAN-OS Vulns

Palo Alto Networks has issued advisories for two critical vulnerabilities in its PAN-OS. The vulnerabilities, CVE-2025-0108 and CVE-2025-0110, may enable...
Read More
CVE-2025-0108 & CVE-2025-0110  Palo Alto Networks Addressed High-Severity PAN-OS Vulns

Update Now
Ivanti Patches 3 Critical Flaws in Connect Secure and Policy Secure

Ivanti has released security updates for Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), and Ivanti Secure Access Client (ISAC)...
Read More
Update Now  Ivanti Patches 3 Critical Flaws in Connect Secure and Policy Secure

This Adtech Company is Powering Surveillance of U.S. Military Personnel

Last year, a joint investigation revealed that a Florida-based data broker, Datastream Group, was selling highly sensitive location data that...
Read More
This Adtech Company is Powering Surveillance of U.S. Military Personnel

Intel Patched 374 Vulnerabilities in multiple products

In 2024, Intel addressed a remarkable 374 vulnerabilities across its software, firmware, and hardware products, distributing bug bounty rewards for...
Read More
Intel Patched 374 Vulnerabilities in multiple products

From now on, any email domain sending over 5000 emails a day must meet specific email authentication standards. If not, emails may be rejected. Google and Yahoo are asking for DMARC compliance to prevent scammers from sending malicious emails. It’s important for organizations to address email bounce backs and improve email authentication to protect employees, customers, and partners.

How Do You Become Compliant?

Email authentication helps detect fake email messages. Techniques like DKIM and SPF are examples of email authentication. Being DMARC compliant means publishing a DMARC policy for all your domains and ensuring that your sending sources are correctly authenticated and aligned. DMARC checks if the message matches the sending domain specified by SPF or DKIM. This is called alignment.

DMARC is a policy that shows if messages are verified with SPF and/or DKIM. It also informs the mail gateway how to handle messages that fail both methods, for example, by marking them as junk or rejecting them.
DMARC helps receivers handle failed messages and reduces the risk of users receiving fraudulent and harmful messages. It allows email receivers to report back to senders about messages that pass or fail DMARC evaluation, helping them identify unauthorized usage of their domains.

Work with your IT team and third-party senders to authenticate your email using SPF and DKIM. Make sure to have a DMARC record with a policy of “none”. Follow additional steps recommended by Google and Yahoo, such as having valid forward and reverse DNS for your sending servers, securing connections with TLS 1.2 or later, maintaining low complaint rates, and ensuring that your marketing platform supports easy unsubscribe options.

Email authentication and DMARC compliance may seem complicated, but with tools like Red Sift’s domain protection service, the process becomes simpler. Red Sift OnDMARC also offers AI capabilities to speed up achieving DMARC compliance compared to other platforms.

When working on this project, it is crucial to be careful. For instance, if you fail to configure authorized email senders, their emails may be accidentally blocked. To avoid such problems, it is important to follow a well-thought-out project plan and use a reliable platform.

What Are the Benefits of These Changes?

Google and Yahoo’s new requirements will encourage more organizations to become DMARC compliant, which will reduce spam and prevent domain impersonation attacks. Microsoft is also recommending that its customers follow the guidance of Google and Yahoo.

Check Also

Indian Bank

Sophisticated malware attack on Indian Banks; Exposes 50,000 users

The zLabs research team found a mobile malware campaign with nearly 900 malware samples aimed …

Leave a Reply

Your email address will not be published. Required fields are marked *