Blog
Notes from the
honest side of email
Deliverability, honest analytics and outreach craft — written in plain language, with no growth-hack snake oil.
Earlier articles
253 articles
DeliverabilityAnalysis5 min
AI phishing jumped 14x in a month. Volume-based filtering can't keep up with that
Hoxhunt's 2026 data shows AI phishing going from 4% to 56% of reported attacks in a month, then settling near 40%. What breaks when growth outruns detection.
ComplianceAnalysis6 min
AI regulation isn't just the EU: where the major jurisdictions actually stand
The EU AI Act gets headlines, but South Korea's AI Basic Act, China's companion-AI rules, and a stalled US preemption fight all moved this month too.
StrategyAnalysis7 min
The AI SDR trust gap: 72% adoption, 46% trust
2026 industry data shows sales teams adopting AI SDRs far faster than they trust them. The gap traces to a specific layer: full autonomy, not AI assistance.
DeveloperAnalysis5 min
Bots passed humans on the web this year. Most software still isn't built for the new majority user
Cloudflare recorded automated traffic overtaking human traffic in 2026, yet only a quarter of developers design APIs for AI agents. What a UI never had to provide.
DeliverabilityAnalysis8 min
Almost every bank has DMARC. Most still let spoofed email through
New 2026 reports show DMARC adoption is near-universal at banks, but only a minority enforce p=reject — the one setting that actually blocks spoofing.
ComplianceAnalysis5 min
Breach notification windows keep shrinking — 2026 made that concrete
California's SB 446 replaced a vague 'unreasonable delay' standard with a hard 30-day clock in 2026. Why fixed deadlines are becoming the norm for incident response.
ComplianceAnalysis7 min
Data minimization just became a fine, not a footnote
CNIL cited unlawful data retention in its €42M Free Mobile fine — a sign minimization is now an active regulatory check, not an ignored line item.
DeveloperAnalysis6 min
Apple's Hide My Email took a year to patch — what that says about privacy-feature bugs
A real-address-leaking flaw in Apple's Hide My Email sat reported for roughly 13 months before a fix shipped in 2026. The real lesson for privacy-relay builders.
AI10 min
The phishing kit that doesn't need your password, just one code you type in
A phishing-as-a-service kit is hijacking Microsoft 365 mailboxes by abusing a legitimate OAuth flow, no password or malware required. Here's how it works.
ComplianceAnalysis6 min
The EU AI Act's enforcement phase just went live — here's what actually changed
July 10 activated real enforcement mechanics; August 2 hands the AI Office fining power over general-purpose models. What's binding now, and who it reaches.
Deliverability7 min
The 5,000-email threshold: how to tell if you're a 'bulk sender' to Gmail
Gmail's bulk-sender threshold counts messages to Gmail addresses only, not total sending volume — and the classification doesn't reverse once you cross 5,000/day.
Deliverability6 min
What changed in Google Postmaster Tools in 2026, and what to actually watch now
Postmaster Tools added a plain-language 'do users want your mail' verdict and a stricter spam-rate trigger. A guide to the new dashboard and what reputation means.