[ad_1]
Dubai: Like Google, Yahoo! As Apple prepares to roll out new email authentication requirements aimed at preventing threat actors from abusing email, research from leading cybersecurity and compliance firm Proofpoint shows organizations in the UAE and Saudi Arabia are more secure over email than their global peers Better prepared on best practices. According to a DMARC (Domain-Based Message Authentication, Reporting and Conformance) analysis of Forbes Global 2000 companies, most organizations in the UAE (80%) and Saudi Arabia (90%) publish DMARC records, while only 73% of the total number of listed companies in the world.
DMARC is an email verification protocol designed to protect domain names from abuse by cybercriminals, thereby reducing the risk of brand impersonation. It verifies the identity of the sender before allowing the message to reach its intended destination. Deny is the most stringent and recommended level of DMARC protection, a setting and policy that prevents fraudulent emails from reaching their intended destination.
As Google and Yahoo! It has been announced that email authentication will be required when sending mail to their respective accounts in the first quarter of this year, and bulk senders will need to meet additional email authentication requirements, including having a strong DMARC policy in place.
Key findings from DMARC’s analysis of the Forbes Global 2000 include:
More than a quarter (27%) of the Global 2000 have no DMARC records at all, indicating they are unprepared for the upcoming email authentication requirements. This compares with just 10% in Saudi Arabia and 20% in the United Arab Emirates.
A staggering 69% of Global 2000 companies do not actively prevent fraudulent emails from being sent to their customers. Less than a third (31%) have implemented the highest level of protection to prevent suspicious emails from reaching customers’ inboxes.
More than half (57%) of UAE companies listed in the Global 2000 do not proactively block scam emails from being sent to customers, with 43% implementing DMARC as a deny level.
Organizations listed by KSA demonstrate stronger levels of email security best practices, with less than half (43%) not actively blocking fraudulent emails (57% have implemented DMARC at the most stringent and recommended denial levels ).
“GCC countries, particularly the UAE and Saudi Arabia, are continuously improving their cyber preparedness, but they must continue to improve measures to prevent fraudulent communication attempts through email, the number one threat vector. Cybercrime Criminals often use pharming to impersonate well-known organizations and companies by sending emails from purportedly legitimate sender addresses. These emails are designed to trick people into clicking on links or sharing personal details, which are then used to steal money or Identity.” said Emile Abou Saleh, senior director of Middle East, Turkey and Africa at Proofpoint. “It is nearly impossible for the average Internet user to distinguish a fake sender from a real sender. By enforcing the most stringent DMARC level (“deny”), organizations can proactively prevent fraudulent emails from reaching their intended targets, thereby protecting their customers , partners and suppliers from cybercriminals trying to impersonate their brand.”
“Even as leading organizations take key steps to prevent threat actors from sending malicious emails to their targets, they need to act quickly to comply with new Google and Yahoo! email authentication requirements,” said Proofpoint Senior Middle East, Turkey and Africa said Director Emile Abou Saleh. “Companies sending to Gmail or Yahoo! must implement Sender Policy Framework (SPF) and Domain Key Identified Mail (DKIM) verification methods, as well as appropriate DMARC policies.”
For the complete research report, please visit https://www.proofpoint.com/us/blog/email-and-cloud-threats/more-one-quarter-global-2000-are-not-ready-upcoming-stringent – Electronic mail.
method
DMARC analysis was conducted on the complete Forbes Global 2000 list in January 2024. The analysis covers companies in 56 countries around the world.
About Proofpoint, Inc.
Proofpoint, Inc. is a leading cybersecurity and compliance company dedicated to protecting an organization’s greatest asset and greatest risk: its employees. Through an integrated suite of cloud-based solutions, Proofpoint helps companies around the world stop targeted threats, protect their data and improve users’ resilience against cyberattacks. Leading organizations of all sizes, including 85% of the Fortune 100, rely on Proofpoint to deliver people-centric security and compliance solutions to mitigate the most critical risks in email, cloud, social media and the web. For more information, please visit www.proofpoint.com.
Connect with Proofpoint: Twitter | LinkedIn | Facebook | Youtube
Proofpoint is a registered trademark or trade name of Proofpoint, Inc. in the United States and/or other countries. All other trademarks contained herein are the property of their respective owners.
[ad_2]
Source link