TIPS & BEST PRACTICE 25. OCT 2022
Zertificon’s Z1 SecureMail Gateway enhances Microsoft 365 for confidential email exchange and ECB exploits prevention
Security researchers at WithSecure disclosed a Microsoft security vulnerability in native Microsoft 365 email encryption in October. Microsoft has no current plans to fix the vulnerability. M365 customers are now dealing with security concerns – on top of known usability limitations:
- Client-side S/MIME encryption only which puts high levels of responsibility on the end user. It requires much effort and increases the risks of incorrect or failed encryption
- Inadequate user guidance for encryption with contacts who do not have a Microsoft account
Microsoft wants to continue using the insecure ECB modeAccording to Microsoft, M365 use of the ECB mode is due to compatibility reasons. Microsoft dismisses the weakness report, reasoning an actual breach threat where attackers can access large email repositories to decode ECB is only possible with a direct attack on a customer’s infrastructure. Instead, Microsoft recommends customers adopt security best practices to protect their own infrastructures, disregarding email interception threats on unprotected networks.
Threat levels are at an all-time high for companiesMicrosoft’s assessment does not accurately match the real cyber threat levels on the Internet. Poorly encrypted messages can be intercepted, analyzed, and manipulated in bulk, opening doors for espionage and sabotage. With the current political situation, risks are exceptionally high.
Z1 SecureMail Gateway integrates with M365 to solve security and usability issuesNo one needs to quit using M365. Companies can enjoy the solution’s benefits without compromising security. Z1 SecureMail Gateway adds email encryption and signature functions to your M365 infrastructure, automatically implementing security in the background. Learn how easy integrating Z1 SecureMail Gateway with M365 can be for your business with the case study of our client, binder pharma services gmbh. You will also find out how it can bring security peace of mind to your organization.