NSA warns of North Korean hackers exploiting weak DMARC email policies

NSA, FBI, and the U.S. State Department warn that the North Korea-linked APT43 (aka Kimsuky) exploits missing or 'p=none' DMARC policies to deliver spearphishing emails that impersonate journalists and academics, targeting think tanks, research centers, academic institutions, and media across the United States, Europe, Japan, and South Korea; the advisory recommends updating DMARC to 'quarantine' or 'reject' and enabling reporting (rua) to mitigate this espionage-focused campaign.