logo

Over 3.3M POP3/IMAP Services Running Unencrypted Without TLS Enabled

ID: 185ac7f2-fa79-5cbc-af3d-226db39d50fa

STIX ID: report--185ac7f2-fa79-5cbc-af3d-226db39d50fa

Feed Name: cybersecurityNews.com

Threat Score
60/100

Date Published: 2024-12-31

Date Updated: 2026-04-21

Author: Guru Baran

...
...

Security audits found approximately 3.3 million POP3/IMAP hosts operating without TLS, exposing user credentials sent over default ports (110 for POP3, 143 for IMAP) in plaintext; the report urges disabling unencrypted ports, migrating to encrypted ports (995/993), implementing stronger authentication (OAuth2, 2FA), and monitoring/restricting access to mitigate credential interception and MITM risks.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.