Help Net Security's latest week-in-review pulls together several security stories, with two standing out. The first is a Cisco patch for an email gateway zero-day that has already been exploited in the wild. The second is the Revolut data breach, where an attacker obtained sensitive customer records by impersonating a government agency and sending email from that agency's actual domain.
The Revolut case is notable because it relied on a trusted domain rather than a lookalike address, making the phishing attempt harder to spot. The Cisco zero-day, meanwhile, shows that even widely deployed infrastructure products can carry vulnerabilities that attackers move on quickly.
Because the source is a roundup, it does not provide technical details such as CVE identifiers or the full scope of the Revolut breach. Still, both items reinforce a common theme: email remains a critical attack surface, both as a product to secure and as a tool for deceiving organizations into handing over sensitive data.