Mimecast, which provides email management systems, updates that the hacker was able to hack into the company’s systems and access customer information.
According to the company, the hacker was able to gain access to a certificate used to identify Mimecast services located on Microsoft’s server.
The company also states that all customers who may have been harmed have been updated and it also asks all customers of the company to replace the existing certificate in their possession with a new certificate issued by the company.
The breach was identified by Microsoft, which updated Mimecast that an unidentified source accessed the company’s servers.
According to DZNet: Mimecast says hackers abused one of its certificates to access Microsoft accounts.
Mimecast, a provider of email management software, said learned of the security incident from Microsoft.
Read more about Examples and Numbers of Social Engineering attacks ›
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW
and See your where your Company is Exposed to Hackers
Recently Published on our Blog
🔒 9 Free Encryption Tools CISOs Trust with Sensitive Data 🔒
Protecting sensitive data is a top priority for CISOs – but strong encryption doesn’t have to come with a big price tag. Here are 9 trusted free encryption tools that help secure files, communications, and endpoints:
1️⃣ VeraCrypt – Open-source disk encryption for full volume and container protection.
🔗 https://www.veracrypt.fr/en/Home.html
2️⃣ GnuPG (GPG) – Encrypt emails, files, and communications with open-source public-key cryptography.
🔗 https://gnupg.org/
3️⃣ OpenSSL – Toolkit for SSL/TLS encryption, certificate generation, and secure communications.
🔗 https://www.openssl.org/
4️⃣ AxCrypt – Free file encryption with secure password management for individuals and small teams.
🔗 https://www.axcrypt.net/
5️⃣ BitLocker (Windows Free Edition) – Full-disk encryption built into Windows Pro editions.
🔗 https://learn.microsoft.com/en-us/windows/security/information-protection/bitlocker/
6️⃣ Cryptomator – Open-source encryption for cloud storage files and folders.
🔗 https://cryptomator.org/
7️⃣ KeePassXC – Open-source password manager with strong encryption for credentials.
🔗 https://keepassxc.org/
8️⃣ OpenSSH – Secure shell and encrypted file transfer for remote systems.
🔗 https://www.openssh.com/
9️⃣ 7-Zip – File archiver with AES-256 encryption for secure storage and transfer.
🔗 https://www.7-zip.org/
⚡ These tools help CISOs secure endpoints, emails, cloud data, and communication channels without licensing overhead.
At AUMINT.io, we complement these technical defenses by simulating human-targeted attacks, ensuring your employees understand encryption importance and don’t create accidental leaks.
🔗 Want to see where your human layer could undermine your encryption strategy? Book a free demo
#CISO #Encryption #CyberSecurity #DataProtection #AUMINT
AI-Powered Social Media Scams Fueling Targeted Email Attacks
🚨 AI-Driven Social Media Scams Are Targeting Employees
💡 Cybercriminals are now using AI to analyze social media activity, crafting hyper-personalized phishing emails that bypass traditional security measures.
⚠️ These attacks mimic tone, style, and interests, making them incredibly convincing and difficult to spot.
🔍 Human behavior is the primary vulnerability – one click or download can compromise networks.
🔥 AUMINT Trident simulates real-world social engineering attacks, helping organizations identify weaknesses and train employees to respond effectively.
📅 Protect your organization before attackers exploit human vulnerabilities: https://calendly.com/aumint/aumint-intro
.
#CISO #CyberSecurity #SocialEngineering #FraudPrevention #HumanFactor #AIThreats #EmployeeAwareness
⚡ Free Vulnerability Prioritization Tools That Save CISOs Time ⚡
Thousands of vulnerabilities hit every year – but not all deserve your team’s immediate attention. The real challenge for CISOs is knowing which ones matter most, right now. Here are free tools that help cut through the noise and focus on what’s critical:
1️⃣ EPSS (Exploit Prediction Scoring System) – Prioritizes based on likelihood of exploitation in the wild.
🔗 https://www.first.org/epss/
2️⃣ CISA KEV Catalog – Free authoritative list of vulnerabilities actively exploited by adversaries.
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog
3️⃣ Vulners.com – Aggregates threat intelligence, exploits, and vulnerability data with prioritization insights.
🔗 https://vulners.com
4️⃣ Qualys TruRisk Free Tier – Helps identify and prioritize vulnerabilities by risk scoring.
🔗 https://www.qualys.com/trurisk/
5️⃣ OpenVAS (via Greenbone) – Vulnerability scanner with reporting that supports prioritization workflows.
🔗 https://www.greenbone.net
6️⃣ Kenna EPSS Explorer (Free) – Combines CVEs with EPSS data for prioritization dashboards.
🔗 https://risk.io/labs
7️⃣ VulnCheck Free Portal – Provides exploit intelligence to identify which CVEs are weaponized.
🔗 https://vulncheck.com
💡 Takeaway: Patch everything is not a strategy. These free tools let CISOs patch smart, focusing resources on the vulnerabilities most likely to be used in attacks.
At AUMINT.io, we help CISOs go further – by simulating how attackers actually exploit overlooked human and technical gaps, then providing data-driven insights to prioritize awareness and defenses.
🔗 Curious how your org would rank if attackers targeted your employees first? Book a free demo
#VulnerabilityManagement #CISO #CyberSecurity #ThreatPrioritization #AUMINT