Only 1.2% of .org domains globally have implemented measures to prevent email phishing, spoofing and ransomware attacks. This figure rises to only 20% among the top 100 US non-profits .org domains by traffic.<\/p>\n\n\n\n
New research from email security provider, EasyDMARC, reviewed a dataset of 9,935,024 verified .org email domains. EasyDMARC found that only 376,497 (3.8%) domains had implemented the Domain-based Message Authentication, Reporting and Conformance (DMARC) security standard. <\/p>\n\n\n\n
The DMARC standard enables the automatic flagging and removal of receiving emails which are impersonating senders\u2019 domains, which is a crucial way to prevent outbound phishing and spoofing attempts. Despite the standard being over a decade old, this research indicates a widespread under-adoption of the standard among non-profits.<\/p>\n\n\n\n
The research also signals a failure by the global non-profit sector to adequately configure DMARC when implemented. Among the small minority of the global .org domains tested that employ DMARC, 171,486 (45.6%) had incorrectly configured it. As a result, these organisations lacked visibility into any impersonating emails they received or blocked. Globally among non-profit domains using DMARC, only 121,290 (32.2%) had implemented a \u2018reject\u2019 policy that automatically rejected emails impersonating a legitimate domain. Most domains employing DMARC had configured it to do nothing about impersonating emails, with 218,777 (58.1%) domains having no policy. A total of 55,281 (14.7%) had configured DMARC to send impersonating emails into quarantine.<\/p>\n","protected":false},"excerpt":{"rendered":"
Only 1.2% of .org domains globally have implemented measures to prevent email phishing, spoofing and ransomware attacks. This figure rises to only 20% among the top 100 US non-profits .org domains by traffic. New research from email security provider, EasyDMARC, reviewed a dataset of 9,935,024 verified .org email domains. EasyDMARC found that only 376,497 (3.8%) […]<\/p>\n","protected":false},"author":50,"featured_media":27946,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[3488,37,43],"tags":[121,3506,4171,190,319],"class_list":["post-27249","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-research","category-top-stories","tag-cybersecurity","tag-dmarc","tag-easydmarc","tag-email-security","tag-phishing"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/27249","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/users\/50"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/comments?post=27249"}],"version-history":[{"count":2,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/27249\/revisions"}],"predecessor-version":[{"id":27619,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/posts\/27249\/revisions\/27619"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/media\/27946"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/media?parent=27249"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/categories?post=27249"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/north-america\/wp-json\/wp\/v2\/tags?post=27249"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}