CEO fraud, phishing, ransomware via infected attachments: Email remains the preferred entry point for attackers. In enterprise environments, the risk is magnified: more mailboxes, more locations, more entry points. And the attacks are becoming more sophisticated. AI-generated text, spoofed sender domains, context-specific attempts at deception – what used to be recognizable by poor spelling is now almost indistinguishable from a genuine sender. Enterprise organizations with hundreds or thousands of mailboxes, complex IT landscapes, and strict compliance requirements have unique needs. This is where NoSpamProxy comes in.
NoSpamProxy Server has proven itself over the years as a reliable on-premises solution for email security. Many companies have been using the solution for a long time—and for good reason: control over their own infrastructure, the ability to customize configurations, and independence from external services are compelling arguments for on-premises operation. But the IT landscape is changing—and cloud solutions are increasingly coming to the forefront. NoSpamProxy Cloud offers a compelling alternative to on-premises operation with NoSpamProxy Server. Both versions are developed on a shared codebase. Those who switch will find a familiar environment on the other side. In this article, we highlight the key differences between NoSpamProxy Server and NoSpamProxy Cloud—and explain how to successfully transition to the cloud step by step.
An accountant opens her mailbox in the morning. There is an email from her long-standing IT service provider – with an invoice for €14,800 attached. The IBAN looks strange, but a short note in the document explains: “Please note our new bank details.” She transfers the amount. Three weeks later, the real supplier sends the first reminder for the invoice – because the money was transferred to the wrong account. To an account abroad. The money is gone, irretrievably. Scenarios like this play out every day in companies around the world. This type of attack has a name: invoice fraud, a sub-form of what is known as Business Email Compromise (BEC). What is often overlooked is that there are always two victims. The recipient who transfers the money and the company whose identity was misused for the attack – and which may not even notice.
Effective immediately, public CAs (certification authorities) are no longer permitted to use the Extended Key Usages (EKU) id-kp-clientAuth and id-kp-serverAuth simultaneously in TLS certificates. Those who do not comply with this rule will no longer be included in the Chrome Root Program and will therefore no longer appear in the Trust Store. We provide information about who is affected and what you should do now.
DMARC reports are a key tool for checking whether a domain’s SPF, DKIM, and DMARC configuration is effective and whether all legitimate senders are being authenticated correctly. Deviations – especially inconsistencies or a lack of alignment between SPF and DKIM – indicate problems in the email infrastructure. A practical example shows why a detailed DMARC analysis is essential for detecting and permanently resolving such problems.
secIT by heise medien is THE congress trade fair for security professionals – and we will be there! From March 18 to 19, 2026, over 100 companies will present their tools, services, and expertise at the Hannover Congress Centrum (HCC). You can look forward to an extensive program of presentations on four stages with over 50 exciting sessions, as well as workshops and deep dive sessions that will give you practical insights into the latest IT security solutions. You will find us in the Eilenriedehalle, booth number E38.
With its official market launch, 25Reports is bringing a new generation of DMARC analysis into productive use. Following a successful early access phase, which began on September 1, 2025, the new features are now available to all users.
In Germany, between 30,000 and 40,000 companies are affected by the requirements of the NIS 2 Directive. Around 80% of them are unaware of this, even though failure to comply can result in severe penalties. In this blog article, you can find out what NIS2 is, what changes the EU Commission has proposed for 2026, and how you can prepare your company for the directive.
NoSpamProxy
Categories
Latest News
No support on Thursday, June 4, 202601.06.2026 - 15:32
New MIME Types in NoSpamProxy Cloud: What You Need to Know21.05.2026 - 17:12
Getting DKIM Right: The Key to Secure Email Communication18.05.2026 - 10:00







