With 99% of NHS email domains having inadequate protection, how can the health service be protected from the phishing threat?
Recent research from cyber security outfit Agari revealed that an astonishing 99% of NHS email domains have inadequate phishing attack protection. The UK Healthcare: DMARC Adoption Report focussed, as the name suggests, on Domain-based Message Authentication, Reporting and Conformance (DMARC) which is designed to validate emails and help prevent domain spoofing, and thereby make phishing a much harder social engineering trick to pull off. As Digital Health reported, according to Agari, “95% of key UK healthcare organisations have no DMARC policy in place, despite the majority of phishing emails carry fraudulent healthcare domains.”