We introduce the Coverage Gap as a measurable distance between the public exposure of critical-infrastructure operators and their declared capability to coordinate vulnerability disclosure. We instantiate it against the 915 Chilean Operadores de Importancia Vital (OIVs) designated by the National Cybersecurity Agency (ANCI) under Ley 21.663 (Resolucion Exenta No. 87, 2025). Using a passive-only, OSINT-based method consistent with ISO/IEC 29147:2018 and Chile's computer-crimes safe harbour (Ley 21.459), we census the foundational disclosure-capability layer (Layer 1: a verifiable disclosure contact). Only 16 of 915 OIVs (1.7%) publish a verifiable RFC 9116 disclosure channel; all four major banks and both telecommunications incumbents lack one entirely. This compares with over 99% adherence under CISA Binding Operational Directive 20-01 (the U.S. federal Vulnerability Disclosure Policy directive; the email-authentication mandate is the separate BOD 18-01). On the secondary email-authentication axis, Chilean OIVs are comparatively strong: DMARC enforcement (quarantine or reject) is present for 146 of 915 designations (16.0%) -- equivalently 16.6% of the 882 measurable domains -- with
The critical role played by email has led to a range of extension protocols (e.g., SPF, DKIM, DMARC) designed to protect against the spoofing of email sender domains. These protocols are complex as is, but are further complicated by automated email forwarding -- used by individual users to manage multiple accounts and by mailing lists to redistribute messages. In this paper, we explore how such email forwarding and its implementations can break the implicit assumptions in widely deployed anti-spoofing protocols. Using large-scale empirical measurements of 20 email forwarding services (16 leading email providers and four popular mailing list services), we identify a range of security issues rooted in forwarding behavior and show how they can be combined to reliably evade existing anti-spoofing controls. We further show how these issues allow attackers to not only deliver spoofed email messages to prominent email providers (e.g., Gmail, Microsoft Outlook, and Zoho), but also reliably spoof email on behalf of tens of thousands of popular domains including sensitive domains used by organizations in government (e.g., state.gov), finance (e.g., transunion.com), law (e.g., perkinscoie.com
Email spoofing is a critical step of phishing, where the attacker impersonates someone the victim knows or trusts. In this paper, we conduct a qualitative study to explore why email spoofing is still possible after years of efforts to develop and deploy anti-spoofing protocols (e.g., SPF, DKIM, DMARC). First, we measure the protocol adoption by scanning 1 million Internet domains. We find the adoption rates are still low, especially for the new DMARC (3.1%). Second, to understand the reasons behind the low-adoption rate, we collect 4293 discussion threads (25.7K messages) from the Internet Engineering Task Force (IETF), a working group formed to develop and promote Internet standards. Our analysis shows key security and usability limitations in the protocol design, which makes it difficult to generate a positive "net effect" for a wide adoption. We validate our results by interviewing email administrators and discuss key implications for future anti-spoofing solutions.
Researchers have created cosmic dust from scratch by recreating space-like conditions inside glass tubes。 The dust contains complex carbon-rich molecules built from elements essential to life and produces infrared signals similar to real material found in space。 By studying these laboratory samples, scientists can explore how organic chemistry unfo
A giant planet had been hiding inside one of astronomy’s most closely studied planetary systems, concealed by a bright disk of cosmic dust。 Webb revealed Beta Pictoris d through atmospheric traces of carbon monoxide, water vapor, and methane, showcasing a promising new method for finding elusive exoplanets
Astronomers have found the first confirmed atmosphere around a rocky planet in another star’s habitable zone。 The planet, LHS 1140 b, revealed its atmosphere through helium slowly leaking into space。 Located 48 light-years away, the world may have preserved its atmosphere for billions of years, making it a promising target in the search for potenti
As a fundamental communicative service, email is playing an important role in both individual and corporate communications, which also makes it one of the most frequently attack vectors. An email's authenticity is based on an authentication chain involving multiple protocols, roles and services, the inconsistency among which creates security threats. Thus, it depends on the weakest link of the chain, as any failed part can break the whole chain-based defense. This paper systematically analyzes the transmission of an email and identifies a series of new attacks capable of bypassing SPF, DKIM, DMARC and user-interface protections. In particular, by conducting a "cocktail" joint attack, more realistic emails can be forged to penetrate the celebrated email services, such as Gmail and Outlook. We conduct a large-scale experiment on 30 popular email services and 23 email clients, and find that all of them are vulnerable to certain types of new attacks. We have duly reported the identified vulnerabilities to the related email service providers, and received positive responses from 11 of them, including Gmail, Yahoo, iCloud and Alibaba. Furthermore, we propose key mitigating measures to de
Scientists have uncovered new evidence that Venus may still be tearing itself apart from within。 Advanced 3D simulations indicate that some of the planet's giant rift valleys formed relatively recently and could still be expanding。 The results suggest Venus has a far more active interior than researchers once believed, challenging the long-held vie
Scientists have created twisted laser beams that interact differently with right-handed and left-handed molecules, revealing their identity through the fragments they produce。 The approach could provide a faster, simpler, and more sensitive way to analyze important molecules used in chemistry and pharmaceuticals
When the first step goes wrong, bad results follow
Europa’s hidden ocean has made the icy moon one of the solar system’s most promising places to search for habitable conditions。 Scientists have hoped that water from this deep ocean might rise through cracks and form shallow reservoirs that future spacecraft could more easily study。 New simulations suggest that journey is unlikely because turbulent
A newly discovered turning point in the Sun’s 11-year cycle could allow scientists to predict future solar activity years earlier than before。 At this “switch-off” point, the most violent space weather abruptly ends, and the remaining number of sunspots offers clues about the next cycle’s strength。 Early projections suggest Solar Cycle 26 may be mo
A new theoretical study offers a possible explanation for how the Universe can grow more complex without violating the second law of thermodynamics。 Using a quantum gravity framework called Gravity from Entropy, mathematician Ginestra Bianconi found that the Universe’s total entropy may rise as space expands, even while entropy within each unit of
Popular AI-powered food apps may make calorie counting easier, but they may also leave out a surprisingly large part of the meal。 Four apps underestimated calories and fat by about one-third when tested against carefully prepared meals。 High-fat ketogenic dishes appeared to cause the most trouble, while carbohydrates were measured more consistently
Sweden could become an important source of rare earth elements needed for magnets and green technologies。 Instead of extracting one target metal, researchers are cataloging everything contained in Swedish mineral deposits。 They will then develop magnets using those naturally available combinations, potentially reducing pollution, waste, and relianc
“We're in the realm where we might be essentially killing off everything within that first hour or two