OVER 3 MILLION MAIL SERVERS WITHOUT ENCRYPTION EXPOSED TO SNIFFING ATTACKS

Summary from the TLDR InfoSec newsletter

Scans from the ShadowServer security threat monitoring platform Shadowserver has shown that around 3.3 million hosts are running POP3/IMAP services without TLS encryption enabled and expose usernames and passwords in plain text when transmitted over the Internet. IMAP is recommended for accessing emails on multiple devices, while POP3 downloads emails to a single device. Enabling TLS encryption can protect usernames and passwords from being exposed in plain text during email exchanges.