The Blind Spots of Email Security

Malicious files and links regularly bypass all the leading email security products, leaving enterprises vulnerable to email-based attacks including Ransomware, Phishing and data breaches (and more specifically, Emotet, Dridex, Maze, Lokibot, Wannacry and more). We see this first-hand working with customers. Installed as a last line of defense, BitDam ATP for email detects malicious attachments that slip through various SEGs. When customers use our Breach Attack Simulation (BAS) tool for email, their email security products score poorly, failing to block most of the samples included in our BAS test. We also know that increased use of automation allows attackers to create many ‘mutations’ for each malware or malicious file, potentially inundating email security products with new unknown threats. Could this explain the shortcoming of email security products? To answer this question we conducted an empirical study to measure their ability to detect Unknown Threats at First Encounter.