DMARC Adoption Soars: Email Security Gets a Boost, But Phishers Aren’t Hooked Yet
DMARC adoption has doubled since Google and Yahoo mandated it for bulk email senders in 2024, but 87% of domains lag behind. While DMARC helps reduce spoofing, attackers pivot to lookalike domains. Meanwhile, the private sector struggles, with healthcare barely reaching 50% adoption. Time to step up the email security game!
Hot Take:
It looks like the war between email security and cybercriminals is heating up, and DMARC is the new sheriff in town. But don’t pop the champagne just yet, because while the good guys might be doubling down on defenses, the bad guys are simply getting more creative. It’s a classic tale of cops and robbers, with a sprinkle of digital espionage!
Key Points:
- DMARC adoption among domains has doubled since Google and Yahoo mandated its use for bulk email senders.
- Despite increased adoption, 87% of domains still lack a DMARC record.
- Regulations like PCI DSS 4.0 and DORA are pushing more organizations toward adopting DMARC.
- Cybercriminals exploit gaps in DMARC using techniques like subdomail attacks.
- Brand Indicators for Message Identification (BIMI) offer the next step for email security.
Already a member? Log in here