Mimecast, which provides email management systems, updates that the hacker was able to hack into the company’s systems and access customer information.
According to the company, the hacker was able to gain access to a certificate used to identify Mimecast services located on Microsoft’s server.
The company also states that all customers who may have been harmed have been updated and it also asks all customers of the company to replace the existing certificate in their possession with a new certificate issued by the company.
The breach was identified by Microsoft, which updated Mimecast that an unidentified source accessed the company’s servers.
According to DZNet: Mimecast says hackers abused one of its certificates to access Microsoft accounts.
Mimecast, a provider of email management software, said learned of the security incident from Microsoft.
Read more about Examples and Numbers of Social Engineering attacks ›
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW
and See your where your Company is Exposed to Hackers
Recently Published on our Blog
🔐 Free API Security Tools Quietly Protecting Enterprises 🔐
APIs are the backbone of modern applications – and they’re a prime target for attackers. The best news? Several free tools help CISOs identify vulnerabilities, monitor traffic, and enforce security without breaking the budget.
Here are the top free API security tools every CISO should know:
1️⃣ OWASP ZAP – Open-source scanner for detecting vulnerabilities in REST and SOAP APIs.
🔗 https://www.zaproxy.org/
2️⃣ Postman (Free Tier) – Test APIs and validate security workflows during development.
🔗 https://www.postman.com/
3️⃣ Tyk Community Edition – Open-source API gateway with authentication, rate-limiting, and security policies.
🔗 https://tyk.io/open-source/
4️⃣ Kong Gateway (OSS) – API management with built-in security features and traffic monitoring.
🔗 https://konghq.com/kong/
5️⃣ WAF-FLE (ModSecurity) – Protects web-facing APIs from OWASP Top 10 attacks.
🔗 https://www.modsecurity.org/
6️⃣ APImetrics Free Plan – Monitor API performance and detect anomalies.
🔗 https://apimetrics.io/
7️⃣ Spectral (Open Source) – Linting tool for OpenAPI specs to catch insecure API definitions.
🔗 https://stoplight.io/open-source/spectral/
⚡ With these tools, CISOs can scan, monitor, and enforce security on APIs while reducing risk exposure across enterprise applications.
At AUMINT.io, we go further – simulating how attackers exploit employees via APIs, social engineering, and phishing, exposing gaps that technical tools alone may miss.
🔗 Curious about your team’s human risk exposure to API attacks? Book a free demo
#APISecurity #CISO #CyberSecurity #ThreatDetection #AUMINT
What Happens If Your Staff’s AI Chats Are Hacked
🤖 Could Your Staff’s AI Chats Be Your Biggest Risk
💡 Hackers are targeting AI chat sessions to access confidential strategies, financial data, and employee information.
⚠️ Employees often trust AI as a secure tool, unknowingly exposing sensitive information that fuels social engineering and corporate espionage.
🔥 Compromised AI chats reveal internal decision-making, client data, and strategic plans – creating a goldmine for cybercriminals.
🔍 AUMINT Trident simulates AI-targeted attacks, measuring susceptibility and providing actionable insights to strengthen human defenses before breaches occur.
📅 Don’t let AI interactions become your organization’s weak point: https://calendly.com/aumint/aumint-intro
.
#CISO #CyberSecurity #SocialEngineering #FraudPrevention #HumanFactor #AIThreats #EmployeeAwareness
🔗 Free Supply Chain Risk Checkers You’ll Actually Use 🔗
Supply chain attacks are skyrocketing – and a single weak link can cost millions. The good news? There are free tools CISOs can use immediately to monitor suppliers, dependencies, and third-party risks.
Here are the top free supply chain risk checkers:
1️⃣ RiskRecon Free Tier – Evaluate vendor security posture and get actionable insights.
🔗 https://www.riskrecon.com/
2️⃣ OWASP Dependency-Check – Scans project dependencies for known vulnerabilities.
🔗 https://owasp.org/www-project-dependency-check/
3️⃣ Sonatype OSS Index – Identifies vulnerable open-source components in your software supply chain.
🔗 https://ossindex.sonatype.org/
4️⃣ CISA Supplier Risk Resources – Free guidance and tools for assessing critical suppliers.
🔗 https://www.cisa.gov/supply-chain
5️⃣ Snyk Free Tier – Detects vulnerabilities in open-source dependencies and container images.
🔗 https://snyk.io/
6️⃣ WhiteSource Bolt (Free) – Integrated vulnerability scanner for DevOps pipelines.
🔗 https://www.whitesourcesoftware.com/free-developer-tools/
7️⃣ CycloneDX Tools – Open-source Software Bill of Materials (SBOM) generation for tracking components.
🔗 https://cyclonedx.org/tools/
⚡ Takeaway: These tools help CISOs spot weaknesses, prioritize vendor mitigation, and reduce supply chain exposure – without waiting for expensive enterprise solutions.
At AUMINT.io, we simulate social engineering attacks targeting suppliers and employees to uncover hidden supply chain risks that purely technical tools miss.
🔗 Want to see your organization’s hidden weak links? Book a free demo
#SupplyChainSecurity #CISO #CyberSecurity #ThirdPartyRisk #AUMINT