Mimecast, which provides email management systems, updates that the hacker was able to hack into the company’s systems and access customer information.
According to the company, the hacker was able to gain access to a certificate used to identify Mimecast services located on Microsoft’s server.
The company also states that all customers who may have been harmed have been updated and it also asks all customers of the company to replace the existing certificate in their possession with a new certificate issued by the company.
The breach was identified by Microsoft, which updated Mimecast that an unidentified source accessed the company’s servers.
According to DZNet: Mimecast says hackers abused one of its certificates to access Microsoft accounts.
Mimecast, a provider of email management software, said learned of the security incident from Microsoft.
Read more about Examples and Numbers of Social Engineering attacks ›
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW
and See your where your Company is Exposed to Hackers
Recently Published on our Blog
🔑 Free Password Audit Tools You’ll Be Grateful For 🔑
Weak or reused passwords remain a major entry point for attackers, yet many organizations lack visibility into credential risks. These free password audit tools help CISOs identify vulnerabilities before attackers exploit them.
Here are the top free password audit tools:
1️⃣ Have I Been Pwned – Check if employee credentials have appeared in breaches.
🔗 https://haveibeenpwned.com/
2️⃣ L0phtCrack Free Edition – Audit password strength and cracking susceptibility.
🔗 https://www.l0phtcrack.com/
3️⃣ KeePassXC Password Analysis – Open-source password manager with audit capabilities.
🔗 https://keepassxc.org/
4️⃣ John the Ripper (Community Edition) – Test password strength using hash cracking simulations.
🔗 https://www.openwall.com/john/
5️⃣ Hashcat (Free Edition) – Advanced password auditing tool for security testing.
🔗 https://hashcat.net/hashcat/
6️⃣ AUMINT Credential Risk Analyzer (Free Demo) – Combines password auditing with human risk simulations.
🔗 https://aumint.io/resources
7️⃣ CyberArk Free Password Check Tools – Identify weak, reused, or compromised passwords across your environment.
🔗 https://www.cyberark.com/resources/free-tools/
⚡ Takeaway: These free tools help CISOs detect weak credentials, reduce attack surfaces, and enforce stronger password policies, saving time and reducing breach risk.
At AUMINT.io, we go beyond technical checks by simulating phishing and social engineering attacks to see which users are most likely to compromise credentials.
🔗 Want to uncover hidden credential risks in your organization? Book a free demo
#PasswordSecurity #CISO #CyberSecurity #CredentialRisk #AUMINT
Spotting Social Engineering Scams Before They Cost You
🚨 Stop Falling for Social Engineering Scams
⚠️ Attackers are exploiting human trust to bypass even the strongest security systems.
📧 Urgent messages, impersonated contacts, and unsolicited requests are their favorite tactics.
💡 Awareness alone isn’t enough – preparation and simulation are key to prevention.
🔑 AUMINT.io’s Trident platform trains employees with realistic attack scenarios, building a resilient human firewall.
⚡ Strengthen your workforce before attackers strike. Book your intro session here
to protect your organization now.
#CISO #CTO #CyberSecurity #SocialEngineering #FraudPrevention #EmployeeTraining
🎯 Free Phishing Domain Trackers Saving CISOs Daily Headaches 🎯
Phishing attacks remain one of the biggest threats to organizations, but staying ahead is possible with the right monitoring. These free phishing domain trackers help CISOs identify suspicious domains before they target employees.
Here are the top free phishing domain trackers:
1️⃣ PhishTank – Community-driven database of active phishing sites.
🔗 https://www.phishtank.com/
2️⃣ APWG eCrime Exchange (eCX) Free Feeds – Aggregates phishing domain data from global sources.
🔗 https://www.antiphishing.org/
3️⃣ OpenPhish Community Edition – Real-time feed of confirmed phishing URLs.
🔗 https://openphish.com/
4️⃣ FraudWatch International Free Tools – Alerts on phishing and domain impersonation.
🔗 https://fraudwatchinternational.com/
5️⃣ URLhaus – Tracks malware and phishing domains used in attacks.
🔗 https://urlhaus.abuse.ch/
6️⃣ Google Safe Browsing – Check URLs against Google’s database of unsafe sites.
🔗 https://safebrowsing.google.com/
7️⃣ AUMINT.io Threat Feed Samples – Curated phishing domain intelligence with human risk insights.
🔗 https://aumint.io/resources
⚡ Using these free trackers, CISOs can proactively block phishing campaigns, protect employees, and reduce incident response workload.
At AUMINT.io, we go further by simulating real-world phishing attacks to see which employees are likely to click and where controls need reinforcement.
🔗 Want to test your team’s resilience against phishing today? Book a free demo
#PhishingPrevention #CISO #CyberSecurity #ThreatIntelligence #AUMINT