Hey cybercrooks: UTAH.GOV is NOT protected from email impersonation attacks!

Congratulations UTAH.GOV! Your CIO Michael Hussey and Chief Technology Officer David Fletcher really ought to invest in a CISO (or fire the one they have). The good news: You've got an award-winning state website. The badnews? You have NO DMARC enforcement, which means ANYBODY can send messages purporting to be from you, and do so without detection.
Businesses can pay their licenses. Motorists can renew their vehicle licenses. Property owners can pay their taxes. Geeze, what could go wrong? Messers Hussey and Fletcher should plug this hole. Before you get plugged. What? You don't know what DMARC is. Google it.

Comments

Popular Posts