Koltrix
AI & email
Prompt injection in email: what it is and why inboxes are exposed
Email is untrusted text written by anyone. Here is how prompt injection works against AI email assistants, how attackers hide instructions, and what they want.
5 min read
DeliverabilityDKIM replay attacks: how signed mail gets abused
A single legitimately signed message can be resent to millions. How DKIM replay works, why it hurts your domain, and the mitigations available today.
4 min read
Email APIPassword reset emails: token design and delivery checklist
Reset emails are a top account takeover vector. Design single-use, short-lived tokens, avoid account enumeration and make the email arrive fast.
4 min read
DeliverabilityBusiness email compromise: invoice fraud red flags
BEC scams change bank details or rush payments through email. Spot the red flags, add out-of-band verification and harden accounts against takeover.
4 min read
Email APIMagic links vs email OTP codes: speed and security
Passwordless login lives or dies on email delivery. Compare magic links and one-time codes on security, link scanners, latency and cross-device use.
5 min read