Tag

Phishing

Articles about "Phishing"

3 articles

DKIM Replay Attacks: Six Email DNS Settings Domain Owners Should Review Now

Phishing emails carrying an official-account mark made headlines in Japan. Even when SPF, DKIM and DMARC all pass, spoofing is not over. This article separates what NTT Docomo and Rakuten Card have disclosed from what engineers have analyzed, explains how a DKIM replay attack works, and lists six DNS and mail-delivery settings for domain owners, based on the RFCs and M3AAWG guidance.

2026-10-19Ryuta Hamamoto

AI Security

Lessons from Japan's 2026 Breaches (Part 1): AI-Driven Attacks and Protecting ID Documents

Twelve Japanese organisations disclosed breaches between June and September 2026. This first part lays out what each one officially said, what public statistics show they have in common, how AI and AI agents are changing the risk, and, using the Times Car disclosure as a starting point, how any company should think about storing and encrypting ID documents. It also reflects follow-up disclosures through late October, including Times Car's fifth notice.

2026-09-30Ryuta Hamamoto

Tech Trends

Warning: The Reality of AI Fraud That Bypasses 2FA — A Complete Guide to Protecting Your Assets and Information

For years, two-factor authentication (2FA) was considered the gold standard of personal account security.

2026-02-08Ryuta Hamamoto

3 articles

AI Security

DKIM Replay Attacks: Six Email DNS Settings Domain Owners Should Review Now

Phishing emails carrying an official-account mark made headlines in Japan. Even when SPF, DKIM and DMARC all pass, spoofing is not over. This article separates what NTT Docomo and Rakuten Card have disclosed from what engineers have analyzed, explains how a DKIM replay attack works, and lists six DNS and mail-delivery settings for domain owners, based on the RFCs and M3AAWG guidance.

2026-10-19Ryuta Hamamoto

AI Security

Lessons from Japan's 2026 Breaches (Part 1): AI-Driven Attacks and Protecting ID Documents

Twelve Japanese organisations disclosed breaches between June and September 2026. This first part lays out what each one officially said, what public statistics show they have in common, how AI and AI agents are changing the risk, and, using the Times Car disclosure as a starting point, how any company should think about storing and encrypting ID documents. It also reflects follow-up disclosures through late October, including Times Car's fifth notice.

2026-09-30Ryuta Hamamoto

Tech Trends

Warning: The Reality of AI Fraud That Bypasses 2FA — A Complete Guide to Protecting Your Assets and Information

For years, two-factor authentication (2FA) was considered the gold standard of personal account security.

2026-02-08Ryuta Hamamoto