Mail Server Security

www.kaspersky.com • May 4, 2026

Kaspersky Security for Mail Server (KSMS) provides trusted and secure corporate email exchange, countering spam, email-borne infections, all forms of phishing, business email compromise (BEC), QR code attacks, and other threats.

All applications are available under a single unified Kaspersky Security for Mail Server license. Combine them for comprehensive coverage, or choose the apps that best suit your needs from a wide range of email security tools for:

Ready-to-use Secure Email Gateway (SEG) software appliance, complete with operating system, mail transfer agent (MTA) and mail security app.

The solution can be provided as a virtual appliance or standalone lightweight application.

Native integration with Microsoft Exchange Server ensures complete protection of mail traffic – from gateway to mailbox level, reducing the risks from spam, social engineering-based attacks and other mail-borne threats.

A single SaaS security solution that protects Microsoft Office 365’s communication and collaboration services – Exchange Online, OneDrive, SharePoint Online and Teams from security threats.

If you'd like to find out how to protect your business from complex cybersecurity threats, your local partner or schedule a demo .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Amazon SES Phishing Attacks Bypass Email Security Measures In early 2026, a surge in phishing attacks utilizing Amazon Simple Email Service (SES) has been reported, exploiting exposed AWS Identity and Access Management (IAM) access keys. Attackers leverage this trusted email infrastructure to send convincing phishing emails that pass standard security checks, including SPF, DKIM, and DMARC. The phishing emails often mimic legitimate services, such as electronic signature notifications from DocuSign, tricking users into revealing sensitive information. Researchers attribute this increase in phishing campaigns to the widespread exposure of AWS credentials found in public repositories and other accessible locations. Automated tools like TruffleHog are used by attackers to find these leaked keys, allowing them to send large volumes of phishing messages. The attacks have raised significant concerns among cybersecurity experts, as blocking the IP addresses used for these emails would disrupt legitimate communications. Recommendations for organizations include enforcing strict IAM permissions, enabling multi-factor authentication, and regularly rotating access keys. 8 sources 70

Extracted Entities

Mail Server Security

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Platforms (3)

Tools (3)