Zero-click email exploits are back in play

Send us Fan Mail Zero-click email exploits are forcing a reset in how organizations think about email security. When opening a message alone can trigger compromise, user awareness is no longer a meaningful control. This shift pushes responsibility down into infrastructure. Email clients, patching cycles, and gateway protections now carry the weight that training once did. At the same time, AI tools are introducing new exposure paths, as seen with Claude share links becoming publicly indexed and searchable. Together, these trends show how quickly control can slip when defaults are misaligned with real-world use. Also covered: a new open-source agentic pentesting tool that enforces human approval, Sakana's orchestration-first approach to AI security workflows, and key updates across exposure management, supply chain risk, and compliance tooling. Learn more at https://crestvale.io Support the show