Mimecast, which provides email management systems, updates that the hacker was able to hack into the company’s systems and access customer information.
According to the company, the hacker was able to gain access to a certificate used to identify Mimecast services located on Microsoft’s server.
The company also states that all customers who may have been harmed have been updated and it also asks all customers of the company to replace the existing certificate in their possession with a new certificate issued by the company.
The breach was identified by Microsoft, which updated Mimecast that an unidentified source accessed the company’s servers.
According to DZNet: Mimecast says hackers abused one of its certificates to access Microsoft accounts.
Mimecast, a provider of email management software, said learned of the security incident from Microsoft.
Read more about Examples and Numbers of Social Engineering attacks ›
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW
and See your where your Company is Exposed to Hackers
Recently Published on our Blog
SEO Poisoning Payroll Phishing – How Job Portals Became Attack Vectors
🔍 Search Clicks Are Now Attack Surface
🔍 Employees searching payroll portals are being ambushed by SEO-poisoned sites that look authentic.
📱 The campaign targets mobile users – phones lack enterprise EDR and often never show up in SIEM logs.
🔗 Fake portals capture credentials and stream them to attackers via WebSocket – access is exploited in real time.
💸 Attackers then change payroll deposit details – money diverts before detection, and investigations look like human error.
⚙️ Defenses must include bookmarking official portals, conditional access with device posture checks, and behavioral monitoring for credential misuse.
📊 AUMINT.io simulates these search-based lures across mobile and desktop, exposing where your humans and tooling fail.
🚀 Want a hands-on checklist and a simulated test of your payroll pathway? Schedule your demo
#CyberSecurity #HumanFactor #PayrollSecurity #CISO #SOC #AUMINT
When Likes Become Liability – Hidden Cyber Risks at Work
📱 Social Posts Could Trigger Your Next Breach
🔐 A simple “Like” or share on a work device can expose your entire network.
👥 Employees using WhatsApp, LinkedIn or Facebook at work are unwittingly feeding attackers entry points – platform design and social trust make it worse.
🔗 One misplaced click on a fraudulent ad or link can unleash malware or phishing across your organisation.
💸 The average breach cost in South Africa hit R53 million in 2024 – human error is the price tag.
🛡️ At AUMINT.io we simulate real-world social media use and messaging staffing-paths to surface your human risk surface and harden your defences.
🚀 Want to see where your weakest exposure is? Schedule your demo
#CyberSecurity #HumanFactor #SOC #CISO #SocialEngineering #AUMINT
Job Seekers Under Fire – How Attackers Use Fake Recruitment to Deploy Advanced Malware
🕵️♂️ Job-Seekers Are the New Frontline for Cyber Attacks
🔍 A threat group called BatShadow is targeting job-seekers and marketers with fake recruitment emails delivering a Go-based backdoor called Vampire Bot.
📧 The lure arrives as a ZIP file claiming to be a job description. Inside: a decoy PDF and a disguised “.pdf.exe” file that launches an infection chain.
💻 The malware profiles the host, captures screenshots, steals credentials, and connects to a remote attacker server – blending into normal traffic and staying hidden.
⚠️ Why it matters: your candidate pipeline may be your weakest human link. One compromised applicant or contractor can expose your network before formal onboarding begins.
📊 Use AUMINT.io to simulate recruitment-style attacks, train your team – and test your human firewalls.
🚀 Ready to find your weakest link before hackers do? Schedule your demo
#CyberSecurity #HumanFactor #SocialEngineering #RecruitmentRisk #CISO #AUMINT