Browse the Learning Center
Email threats
Phishing, BEC, spoofing, and the wider security landscape.
117 guides
All Email threats guides
What is ping spoofing and does it matter?Ping spoofing means faking your network latency — a PvP game cheat, and separately an ICMP source-address trick. Here is what each one is and when it matters.
What is a quid pro quo attack?A quid pro quo attack trades a fake favour — IT help, a gift, a job — for your credentials or access. Here is how it works and how to stop it.
What is piggybacking in cybersecurity?Piggybacking in cybersecurity is when an authorized person knowingly lets an unauthorized one into a restricted area — how it differs from tailgating.
What is a honeytrap scam and how do you spot one?A honeytrap scam uses a fake romantic or friendly connection to manipulate a target into sending money or leaking data. Learn how to spot one.
Spam vs phishing: what's the difference?Spam vs phishing: spam is unsolicited bulk email, while phishing is a targeted scam that impersonates a trusted sender to steal data or money.
Phishing vs spoofing: what's the difference?Phishing vs spoofing: spoofing fakes a sender's identity, while phishing is the scam that uses it to steal data or money. See the difference and the defenses.
How can geofencing improve my organization's cybersecurity?Learn how geofencing adds location-based controls to your security stack, with use cases, benefits, and implementation tips.
How does data poisoning threaten machine learning?Learn what data poisoning is, how it harms ML models, and practical defenses security teams can use.
How do password managers protect your accounts?Learn how password managers secure credentials, key features to choose, and steps to deploy them across teams.
What are debug symbols and why do they matter for security?Learn what debug symbols are, how they map binaries to source code, and why they’re important for developers and security teams.
What is URL spoofing and how can I stop it?URL spoofing uses lookalike web addresses to steal logins and spread malware. Learn how fake URLs work, how to spot them, and how MSPs can block them.
How do network redirectors work — and why do they matter?Learn what network redirectors do, how they enable shared resources, and practical steps to reduce the security risks they introduce.
What is a LAN and how does it affect security?Learn what a LAN is, typical components, major security risks, and clear steps to protect your local network.
What does a digital forensic analyst do in cybersecurity?Clear, practical answers about what a digital forensic analyst does, tools they use, and common forensic workflows.
What are hoax attacks and how can organizations stop them?Learn how hoax attacks work, how to spot them, and practical steps organizations can use to verify and stop false security alerts.
How does dark web activity threaten organizations?Dark web markets sell stolen credentials that fuel ransomware and BEC. How the trade works, what monitoring can and can't do, and how MSPs should respond.
How does sandboxing help stop malware?FAQ: sandboxing basics, how it works, benefits, and where to use it in security stacks.
How should organizations protect data privacy in cybersecurity?Actionable guidance for IT professionals to reduce data privacy risk, comply with laws, and protect sensitive information.
How can I spot and avoid Cash App scams?Learn common Cash App scams, how scammers operate, and clear steps to protect your money. Practical tips from Palisade.
How does multihoming improve network resilience and security?Multihoming uses multiple ISP links to boost availability and defend networks. Learn types, risks, and best practices.
What is the data plane and why does it matter for network security?Learn what the data plane is, how it moves traffic, common threats, and best practices to protect network forwarding functions.
How fast should your team respond to incidents (MTTR)?A concise guide to Mean Time to Respond (MTTR) in cybersecurity: definition, calculation, and tactics to lower response times.
Does on‑premises security still matter in a cloud‑first world?Explore why on‑premises security remains vital, its pros and cons, and practical steps IT teams can take to protect local infrastructure.
How does a SYN packet workLearn what SYN packets are, how SYN flood attacks work, and practical steps security teams use to detect and mitigate them.
What is heap spraying and how does it let attackers hijack memory?An FAQ that explains heap spraying, real-world examples, defenses, and quick takeaways for IT teams.
How do cloud security frameworks protect cloud environments?Learn what cloud security frameworks are, their components, best practices, and how to use them to secure cloud and hybrid environments.
What is SNMP and how should network teams secure it?SNMP explained for IT teams: how it works, security risks, and practical steps to protect your network.
How do cryptors let malware hide from security tools?Cryptors disguise malware by encrypting payloads, using packing, polymorphism, and sandbox checks to bypass detection.
How do malware packers hide malicious code?Learn how malware packers hide code, signs of packing, detection methods, and response steps for security teams.
Does on‑prem security still matter in the cloud era?FAQ guide: what on‑prem means, why it still matters, pros and cons, and practical steps IT teams should take.
What is a cryptor and how does it hide malware?Learn what cryptors are, how they conceal malware, and concrete steps defenders can take to detect and respond.
How does SOA influence cybersecurity in modern enterprises?Practical Q&A on SOA security: risks, controls, and migration steps for IT teams.
How do cyberweapons work and how can you defend?Learn how cyberweapons operate, real-world examples, delivery tactics, and practical defenses to protect critical systems.
How does a decompiler work and why should security teams use one?Learn what a decompiler does, how it reconstructs readable code from binaries, and why security teams rely on it for malware analysis and vulnerability…
What is a media server and why does it matter for security?Quick guide to media servers, risks, and practical security steps for IT teams.
How does Transport Layer Security (TLS) secure data in transit?What TLS does, how the handshake works, where it’s used, and how to keep TLS deployments secure.
How do watering hole attacks use trusted websites?Understand watering hole attacks: how they target trusted websites, common techniques, detection tips, and practical defenses for IT teams.
How do Security Identifiers (SIDs) work in Windows?Understand Windows Security Identifiers (SIDs), common SID risks, and practical steps to manage SIDs across domains.
How does system development ensure cybersecurity?How secure system development reduces risk, lowers remediation costs, and embeds defenses throughout the SDLC.
Why will ransomware still be a major threat in 2024?Why ransomware remains a top threat in 2024 and what MSPs and SMBs can do to reduce risk.
Why should organizations run regular phishing simulations?Why perform routine phishing simulations, the best practices, and quick steps to strengthen employee detection and reporting.
How are cybercriminals accessing your clients' networks?Five common, often-missed ways attackers infiltrate client networks — and clear steps MSPs can take to stop them.
Which cybersecurity standards go beyond Cyber Essentials?Cyber Essentials is only a baseline. Compare ISO 27001, NIST CSF 2.0, CIS Controls, SOC 2, PCI DSS, HIPAA and GDPR — and pick the right next step.
How can a small business build a cyber security plan?Six clear steps to create and maintain a small-business cybersecurity plan: assess risks, secure communications, protect data, harden devices, automate…
Which 4 security solutions should small businesses use?Four practical cyber security solutions small businesses should prioritize, with quick takeaways and FAQs for IT leaders.
Is AI-Written Malware Evolving Faster Than Defenses?How AI-generated malware is changing attacks and what MSPs and SMBs must do now to defend with Palisade.
How can small businesses dodge cyber traps during Black Friday sales?Practical steps for small businesses to prevent phishing, credential theft, and ransomware during Black Friday sales.
What did I learn from my first cybersecurity incident?Practical lessons from a first cybersecurity incident: incident playbooks, customer-first triage, communication, and post-incident growth.
Is November’s shopping frenzy the prime time for cyber scams?November shopping spikes cyber scams. Learn the top threats, real examples, and practical steps MSPs and SMBs can take to reduce risk.
Why does healthcare data attract ransomware attackers so often?Why healthcare records draw ransomware attacks and what IT teams can do to reduce risk and recover quickly.
How can healthcare organizations stop ransomware?Practical steps healthcare teams can take to reduce ransomware risk: backups, MFA, training, segmentation, and monitoring.
How can attackers exploit OAuth device code login?How attackers exploit Device Code flow, what risks that creates, and practical mitigations for security teams.
How do you choose the right endpoint security solution?How to choose endpoint security: what EDR must include, how to read MITRE and AV-Comparatives tests, vendor questions for MSPs, and rollout steps.
How could the Israel–Iran cyber war affect U.S. companies?How the Israel–Iran cyber conflict, hacktivism, and AI disinformation create risks for U.S. companies — and what security teams should do now.
Can attackers use trusted installers to blind EDR?How attackers hide payloads inside legitimate installers to bypass endpoint detection and create blind spots; detection and mitigation steps for IT teams.
How do attackers misuse SharePoint Online?How attackers exploit SharePoint Online: reconnaissance, initial access, lateral movement, persistence, and practical defenses for IT teams.
How did ShinyHunters use vishing and OAuth abuse to breach the cloud?How social engineering and OAuth token misuse let attackers access cloud CRM data — and what security teams should do now.
How can organizations stop the top identity-related threats?Explore the leading identity threats—BEC, credential stuffing, ATO, auth bypass—and how MSPs can prevent them with MFA, least privilege, MDR, and DMARC.
How is security innovation reshaping managed security services?Explore platform updates: ITDR for Google Workspace beta, phishing simulations at scale, one-click agent uninstall, AI improvements, and recent awards.
How are identity threats evolving against Google Workspace in 2025?Identity attacks on Google Workspace surged in 2025. Learn key trends, defenses, quick takeaways, and FAQs for IT teams.
How does fileless malware operate and how can you stop it?Understand fileless malware — how it runs in memory, common techniques, and practical defenses IT teams can use to detect and stop it.
DoS vs DDoS Attacks: What's the Difference?DoS vs DDoS: a DoS attack floods a target from one source, a DDoS from thousands of botnet devices. Compare scale, tracing, blocking, and defenses.
What Are the Best Email Security Practices for Businesses?Discover essential email security best practices for businesses, including DMARC, DKIM, SPF, MFA, and employee training.
What Are the Five Stages of Penetration Testing?Learn the five stages of penetration testing, from planning to retesting, and why each step is crucial for protecting your business against cyber threats.
What are the different types of penetration testing?Learn about penetration testing areas, styles, techniques, and methods to strengthen your security posture.
How Can You Move from Reactive to Proactive Email Security Posture?Learn how to transition from reactive to proactive email security with expert Q&A from our webinar. Get actionable steps for DMARC, DKIM, SPF, and BIMI.
How can schools prevent security incidents?Learn about recent education security incidents and how to safeguard schools with email authentication, ransomware protection, and best practices.
Why a single solution can’t stop ransomware?Discover why ransomware evolves, the limits of single defenses, and practical steps to protect your organization with layered security.
Which Tools Are Used in a DDoS Attack?Explore the most common DDoS attack tools, their categories, and how they work to help you strengthen your defenses.
What are the 14 most common social engineering attacks?Discover the 14 types of social engineering attacks, their tactics, and effective defenses to keep your business safe.
How can remote teams avoid cybersecurity risks?Discover key cybersecurity risks for remote teams and actionable tips to keep your data safe while working from home.
What Are the Top Email Security Tips for Small Businesses?Small businesses rely heavily on email, making them prime targets for cybercriminals.
What makes hybrid malware a serious threat to businesses?Hybrid malware blends two or more malicious code families—such as a worm paired with a rootkit—to deliver a single, powerful attack.
How Can You Detect Malware on Your Devices?1. Review running processes. Open Task Manager (Windows) or Activity Monitor (macOS) and look for unfamiliar entries consuming CPU or memory.
Why are 97% of Indonesian domains vulnerable to cyberattacks?Recent analysis of Indonesia’s country‑code top‑level domains (ccTLDs) shows a staggering security gap.
What exactly is a data breach and how can you stop it?A data breach is an unauthorized exposure, transmission, or use of confidential information, potentially crippling an organization’s operations.
What Is Fileless Malware and How Can You Defend Against It?Fileless malware is a stealthy type of malicious code that runs directly in a computer’s memory without ever touching the hard drive as a traditional…
What Are the Top 5 Most Notorious Malware Attacks of All Time?You may not realize it, but a malware incident happens roughly every 39 seconds worldwide.
What is Whaling Phishing and How Can You Prevent It?Whaling phishing is a targeted email fraud that pretends to be a senior executive or high‑level official in order to trick recipients into revealing…
What is an impersonation attack and how can you stop it?Impersonation attacks are a form of social engineering where a malicious actor pretends to be a trusted person—often a senior executive or a known…
What Are the Most Common Types of DDoS Attacks and How Do They Work?A Distributed Denial‑of‑Service (DDoS) attack floods a target’s network or application with bogus traffic, overwhelming resources and rendering services…
How can you detect DDoS attacks?Cyber threats continue to evolve, and distributed denial‑of‑service (DDoS) attacks remain a top concern for organizations of all sizes.
What Were the Major Email Security Highlights in September 2021?September 2021 saw a flurry of email‑related security news, ranging from regulatory actions to new protection tools. What regulatory action did the U.S.
What Were the Key Email Security Highlights in October 2021?Cybersecurity Awareness Month, launched by the U.S. Department of Homeland Security, runs every October to promote best practices in digital safety.
Key insights from Splunk's State of Security reportSplunk’s inaugural State of Security Report compiles insights from 535 security leaders worldwide, offering a snapshot of today’s threat landscape and…
Why are targeted email attacks so hard to stop?Targeted email attacks—often called spear‑phishing—are engineered to look like legitimate communication, making them notoriously hard to detect and stop.
The Real Business Impacts of Social EngineeringSocial engineering is a hacking technique that targets the human element of security rather than technology.
How Does Business Email Compromise (BEC) Threaten Your Business?Business email compromise (BEC) is a social‑engineering attack where cybercriminals target corporate email accounts to trick employees into sending money…
What is ransomware and how does it spread?Ransomware is a type of malicious software that locks or encrypts a victim’s data and demands a ransom for its release.
What Exactly Is Spoofing and How Can You Stop It?Spoofing is a broad term for attacks where cybercriminals pretend to be a trusted source—whether an email sender, website, or even a phone number—to trick…
How Do Honeypots Safeguard Your Network Against Cyber Attacks?Honeypots are decoy systems that attract malicious actors and capture their tactics for analysis. What is a honeypot and why use it?
How can you stop spoofing attacks?Imagine you get an urgent email that looks like it’s from your insurance provider, asking for personal details.
How Does IP Spoofing Work and How Can You Stop It?IP spoofing remains a stealthy technique that lets attackers disguise their true location.
What is a watering hole attack and how can you stop it?Watering hole attacks are stealthy cyber‑threats that compromise legitimate websites frequented by a specific audience, turning those trusted sites into…
Why is Penetration Testing Essential for Your Business?Penetration testing, often called pen testing, is a proactive security practice where ethical hackers simulate real‑world attacks to uncover hidden…
What were the biggest email security headlines in April 2022?Welcome back to our weekly security roundup. This week’s focus is on three major email‑related incidents that could impact your organization’s defenses.
What are the biggest cybersecurity risks for remote teams?The biggest threats stem from devices and connections that sit outside the corporate network.
How can you spot fake emails and protect yourself from scams?Phishing attacks are getting more sophisticated, but you can protect yourself by learning to spot the red flags in fake emails.
How dormakaba keeps email security strong at scaleMergers and acquisitions (M&A) can boost growth, expand market share, and streamline supply chains.
What’s the $50 B impact of BEC scams and how to stop them?Business Email Compromise (BEC) scams have now been reported to cost organizations worldwide a staggering $50 billion.
How will the SVB collapse boost BEC scams and what can you do?Whenever a crisis strikes in today’s digital world—whether a natural disaster or a financial shock—people flock to the Internet for help, updates, and…
Why must NZ government domains adopt new email standards?New Zealand’s Digital Government has released the Secure Government Email (SGE) Framework, a modern set of technical controls that replace the legacy…
Spear phishing vs phishing: key differences in 2025Spear phishing vs phishing: how targeting, research, and payloads differ, why each one gets through, and the layered defenses that stop both.
What is a whaling attack and how can you stop it?Whaling attacks are highly targeted phishing attempts aimed at the most senior leaders within an organization—CEOs, CFOs, board members, and other…
Business Email Compromise (BEC) attacks: 2025 guideYou receive an urgent email from your CEO requesting a wire transfer. It looks legit—right email address, familiar language, and insider details.
What Is Angler Phishing and How Can You Stop It?Angler phishing uses fake social-media support accounts to bait frustrated customers. Learn how the attack works, the warning signs, and how to shut it down.
What are the 3 types of email impersonation attacks?The cost of Business Email Compromise (BEC) totaled more than $50 billion over a nine-year period ending July 2019, according to the FBI.
How can you protect your brand from impersonation with anti‑spoofing?Anti‑spoofing technology and features might not be the flashiest part of your email stack, but they can make or break your email program—and your brand’s…
What is email spoofing and how can you prevent it?Email spoofing is a deceptive practice cybercriminals use to disguise their identity by altering the sender information in emails.
How can AI and zero trust improve email security?Email security isn’t what it used to be. Today’s cybercriminals wield AI to craft phishing emails that can fool even senior executives.
What is TLS? Transport Layer Security ExplainedLearn how TLS protects your data with encryption, authentication, and integrity checks.
What is a Firewall? Network Security Basics ExplainedDiscover what firewalls are, how they work, and why they’re crucial for network security.
What is an email Alias? Uses, Setup and SecurityDiscover what an email alias is and how it organizes your inbox.
What is Spear Phishing? Targeted Attacks ExplainedSpear phishing is a targeted email attack that impersonates someone you trust. Learn how it works, why it succeeds, and how to defend against it.
What is Malware? Types, Examples and PreventionExplore malware, harmful software spread via phishing, and how SPF, DKIM, DMARC protect you.
What is Spoofing? Email Spoofing Attacks ExplainedLearn about spoofing, fake email attacks, and how to protect with email authentication.
What is Phishing? Attack Types and Prevention GuideWhat phishing is, how the attack works step by step, the main types, and how SPF, DKIM, and DMARC plus user training stop it.