NETTY ZERO-DAY CVE: SPOOFED EMAIL THAT STILL PASSES ALL THE CHECKS

Summary from the TLDR InfoSec newsletter

Netty is everywhere in the Java ecosystem - used by Apple, Meta, and Google among many others. Read about a business logic flaw around SMTP that could enable attackers to bypass SPF, DKIM, and DMARC, and how depthfirst's security AI agent [11] flagged the issue and generated a