Half of Organizations Lack Protection Against Email Spoofing

Valimail reports that roughly half of organizations remain vulnerable to email spoofing due to lenient or non-enforcing DMARC policies (such as p=none) adopted to meet mailbox provider requirements, creating a false sense of security. The report warns that weak DMARC does not prevent impersonation or phishing, underscores email as a persistent organizational weak point, and recommends stronger DMARC enforcement alongside security awareness training to reduce social engineering risk.