Mimecast, which provides email management systems, updates that the hacker was able to hack into the company’s systems and access customer information.
According to the company, the hacker was able to gain access to a certificate used to identify Mimecast services located on Microsoft’s server.
The company also states that all customers who may have been harmed have been updated and it also asks all customers of the company to replace the existing certificate in their possession with a new certificate issued by the company.
The breach was identified by Microsoft, which updated Mimecast that an unidentified source accessed the company’s servers.
According to DZNet: Mimecast says hackers abused one of its certificates to access Microsoft accounts.
Mimecast, a provider of email management software, said learned of the security incident from Microsoft.
Read more about Examples and Numbers of Social Engineering attacks ›
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW
and See your where your Company is Exposed to Hackers
Recently Published on our Blog
🖥 Free Browser Isolation Tools Changing Security Overnight 🖥
Browser isolation has quietly become one of the most effective defenses against phishing, drive-by malware, and malicious scripts. The best part? You don’t always need to pay enterprise prices to start testing it.
Here are free or open-source browser isolation tools CISOs should know:
1️⃣ Bromite – A Chromium-based browser with built-in ad/JS blocking and strong isolation controls.
🔗 https://www.bromite.org
2️⃣ Qubes OS Disposable VMs – Open-source OS where every browser session runs in an isolated VM.
🔗 https://www.qubes-os.org
3️⃣ Firejail – Linux sandboxing utility to run Firefox/Chromium in hardened isolation.
🔗 https://firejail.wordpress.com
4️⃣ Whonix with Tor Browser – VM-based browser isolation that anonymizes and separates browsing activity.
🔗 https://www.whonix.org
5️⃣ OpenBSD unveil/pledge (with Firefox/Chromium) – Security frameworks to restrict what the browser can access.
🔗 https://www.openbsd.org
6️⃣ Island (Community Edition) – App and browser isolation for mobile endpoints.
🔗 https://island.oasisfeng.com
7️⃣ Browser in a Box (by Sirrix/BSI) – Open-source hardened virtualization of browser sessions.
🔗 https://www.sirrix.com
⚡Takeaway: CISOs don’t need million-dollar budgets to reduce browser-borne risks. Starting with free browser isolation is like giving your endpoints a hazmat suit.
At AUMINT.io, we go further – simulating the exact phishing lures and malicious links attackers use to test if employees would click in the first place. Because isolation helps, but awareness changes outcomes.
🔗 Want to see how your employees handle simulated browser-borne attacks? Book a free demo
#BrowserIsolation #CyberSecurity #CISO #ThreatPrevention #AUMINT
Workday Data Breach Exposes Risks of Social Engineering Attacks
🚨 Workday Breach Reveals Human Layer Risks
💡 Attackers bypassed technical defenses by exploiting employee trust through social engineering.
⚠️ Credentials and sensitive HR data were compromised, demonstrating that even cloud platforms are vulnerable.
🔍 The attack shows humans are still the weakest link in cybersecurity, despite robust technical safeguards.
📊 Social engineering tactics are evolving, personalized, and increasingly hard to detect.
🔥 Continuous simulations and real-time monitoring can transform employees into a strong human firewall.
👥 AUMINT Trident provides realistic attack simulations, actionable insights, and recurring training to mitigate risks.
📅 Don’t wait for the next breach – secure your human layer now: https://calendly.com/aumint/aumint-intro
.
#CISO #CyberSecurity #SocialEngineering #FraudPrevention #HumanFactor #RiskManagement #EnterpriseSecurity
🕵️♂️ Free Threat Intel Feeds CISOs Secretly Rely On 🕵️♂️
Behind the scenes, most CISOs quietly tap into open-source threat intelligence feeds that rival paid platforms. Here are some that consistently deliver high value at zero cost:
1️⃣ Abuse.ch Feeds – Malware, ransomware, and botnet tracking (URLhaus, SSLBL, MalwareBazaar).
🔗 https://abuse.ch
2️⃣ AlienVault OTX – Community-driven IoCs with global sharing.
🔗 https://otx.alienvault.com
3️⃣ MISP Feeds – Indicators from the popular open-source threat sharing platform.
🔗 https://www.misp-project.org/feeds/
4️⃣ Cybercrime Tracker – C2 server tracking for malware families.
🔗 http://cybercrime-tracker.net
5️⃣ PhishTank – Verified phishing URLs submitted by the community.
🔗 https://phishtank.org
6️⃣ ThreatFox – IOC sharing platform focused on malware & threat actors.
🔗 https://threatfox.abuse.ch
7️⃣ Feodo Tracker – Botnet C2 feed with real-time updates.
🔗 https://feodotracker.abuse.ch
⚡These feeds fuel SOC alerts, enrich SIEM rules, and give CISOs a tactical edge without blowing the budget.
At AUMINT.io, we push this further – simulating how attackers test these same intel gaps against your employees through spear-phishing, vishing, and real-world deception. Because knowing about threats is one thing – training humans to resist them is the real defense.
🔗 Ready to test your human threat surface? Book a free demo
#ThreatIntelligence #CISO #CyberSecurity #AUMINT #FraudPrevention