Sebastian Salla

In my latest security research I found that due to severe misconfigurations, I was able to deliver SPF authenticated emails on behalf of the Ukrainian MoD, MIT and 1000+ others. caniphish.com/phishing-resou…

Next week I'll be presenting two talks at two conferences! If you're at the AWS Public Sector Summit in Canberra or CrikeyCon in Brisbane, please come by and say hello! AWS Public Sector Summit Talk: Cloud-focused security for speed and scale CrikeyCon Talk: The Art of Phishing

Checkout our latest blog post! After scanning 1.7 million Australian domains we found 1.62 million SPF and DMARC security issues. 542 domains were misconfigured to such an extent that any public IP address could send SPF authenticated emails as them! caniphish.com/phishing-resou…

I've just made CanIPhish's email templates public. Check them out! bit.ly/3weQ4cO

Maintaining control over all the IPs in your SPF record are crucial to ensuring you're not vulnerable to IP takeover attacks!

I learnt something new just now. If you want the #privacy protection of DuckDuckGo but your search results from #Google then just prepend "!Google" to your DuckDuckGo search. Et voila, your google search gets laundered and your privacy remains respected.

Over the past month I've been researching IP-takeover vulnerabilities specific to email sender supply chains. After some initial testing I decided scan 1.8 Million Australian domains... and found some pretty interesting results. Check it out the blog! caniphish.com/phishing-resou…