email – CIO.works

Strengthening Email Ecosystem: Outlook’s New Requirements for High‐Volume Senders

Outlook introduces stricter email authentication standards for domains sending over 5,000 emails daily, requiring SPF, DKIM, and DMARC compliance to enhance inbox security and reduce spoofing and spam. Non-compliance will lead to messages being routed to Junk and eventually rejected. Organizations are advised to audit their DNS records and implement transparent mailing practices. Enforcement begins in May 2025. These measures aim to protect users and improve deliverability for legitimate senders, encouraging industry-wide best practices.

https://techcommunity.microsoft.com/blog/microsoftdefenderforoffice365blog/strengthening-email-ecosystem-outlook’s-new-requirements-for-high‐volume-senders/4399730

Domain-based Message Authentication, Reporting, and Conformance (DMARC)

By CIO / D / domain names, DNS, email

DMARC: Email authentication protocol. Prevents spoofing, phishing. Requires SPF/DKIM alignment. Provides reporting for domain owners. Enhances email security.

Domain Keys Identified Mail (DKIM)

By CIO / D / email, domain names, DNS

DKIM: Email authentication method using cryptographic signatures. Validates sender's domain, prevents spoofing, enhances email security, supports integrity. Implemented via public/private key pairs in DNS.

Sender Policy Framework (SPF)

By CIO / S / DNS, email

SPF: Email authentication method, prevents spoofing by verifying sender IP against authorized domains. Enhances deliverability, reduces spam. Uses DNS records.

Report: State of Email Deliverability 2025

By CIO / Blog / email

Mailgun's “State of Email Deliverability 2025” report surveys 1,100 email senders globally, highlighting the importance of adapting to new inbox requirements from providers like Gmail and Yahoo. Key findings include challenges in deliverability, lack of list hygiene, and inadequate monitoring of email blocklists. The survey indicates a need for better email practices, with significant awareness of authentication requirements but many senders not implementing necessary changes. Prioritizing deliverability improves not just email success but overall customer experience.

https://www.mailgun.com/resources/research/state-of-email-deliverability/

Business Email Compromise (BEC)

By CIO / B / social engineering, phishing, email

Cybercrime targeting organizations; attackers exploit email to impersonate executives, suppliers, or partners, deceiving victims into transferring funds or sharing sensitive data. Methods include phishing, social engineering, and account compromise. Preventive measures: strong authentication, employee training, and email filtering.