THIS BIZARRE EMAIL FLAW IS LEAKING CORPORATE SECRETS TO ANYONE WHO BUYS THE RIGHT DOMAIN

Summary from the TLDR InfoSec newsletter

Security researchers discovered that seemingly harmless addresses such as noreply and deleteduser could leak sensitive corporate information via unintended emails. The researchers realized that domains such as noreply[.]net and noreply[.]us were receiving huge volumes of emails. WIRED reported that noreply[.]net received more than 400k messages over a year and a half, including more than 28k attachments.