HOLLYS Confirms Breach of 2.76M Records With Passwords
HOLLYS says unauthorised access from 3 Sep to 7 Oct exposed member IDs, passwords and contact details from 2009-2020 data. Change every reused password now.
Areas of Focus
Email InfrastructureSMTP & MTA ArchitectureSPF, DKIM, DMARC & SRSEmail Privacy & SecurityCredential Stuffing PreventionSoftware Engineering
Articles by Ahsan Luqman
271 articlesCheck Any Email for Phishing in 60 Seconds With Three Checks
One suspicious email, sixty seconds: check the sender domain, hover every link, and question the ask. The alias test exposes most forgeries.
A Hacked Email Means Two Jobs: Get Back In, Then Evict Them
Your email was hacked. You have two jobs: get back in, then evict the intruder from your sessions, mail rules and recovery settings. Work them in this order.
Is Outlook Safe? Strong Security, Weak Privacy, Harden It
Outlook.com has strong account security and weak email privacy. Lock the account with a passkey and two-step verification, and stop handing out the address.
Use a Separate Alias per Social Platform to Contain Leaks
Facebook, LinkedIn and Twitter have each leaked hundreds of millions of addresses. The answer is one alias per platform, so a leak at one site chains nowhere.
Yes, Someone Can Hack Your Email Without Your Password
Yes, your email can be hacked without your password. Four attacks bypass it entirely, and each one has a specific fix. Here they are.
Changing Your Password Does Not Always Stop a Hacker
A password change closes the front door. Sessions, tokens, recovery tricks and malware are the side doors, and they stay open until you close them too.
Fancl and Attenir Breach Hits 785,496 Members' Email Data
Fancl and Attenir confirmed a breach hitting 785,496 members. Email addresses, names, birthdates and phone numbers leaked. Payment data did not.
Read an Email Header and Spot the Fake in 60 Seconds
The From line is a claim. The header is the record: read Received bottom-up, check the authentication verdict, and judge one suspicious email in 60 seconds.
Secure Your Email Account in Order, Starting With a Passkey
Your inbox is the master key to every account you own. Lock it down in priority order, then shrink what any one site can expose.