Study of 671,000 domains reveals email security gaps threatening AI agent infrastructure

·1 views

A DNS scan of 671,693 domains conducted on July 25, 2026, found that despite growing DMARC adoption, enforcement rates actually fell by 0.42 percentage points last month as most new records were set to the non-enforcing 'p=none' policy. Of the 468,749 domains publishing DMARC records, only about 49% enforce quarantine or rejection, while roughly 117,000 domains carry records that block nothing and report nothing. Additionally, 166,442 DMARC-publishing domains have no working reporting address, meaning they receive no telemetry about email delivery failures or spoofing attempts. The analysis also challenges the assumption that self-hosted email is obsolete, finding it remains the single largest mail-hosting category at 22.79%, ahead of both Google Workspace and Microsoft 365. These infrastructure weaknesses are particularly relevant as AI agent platforms increasingly rely on email APIs, with their end-users concentrated in the less-protected long tail of the internet.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

How to Control Claude Code API Costs With Token Budgets and Smarter Caching

Production teams using Claude Code often face runaway API costs driven by silent context accumulation and cache invalidation that standard billing dashboards fail to surface. Conversation histories can quietly balloon from 10,000 to 200,000 tokens across multi-turn sessions without any code changes, causing monthly token spend to double. Anthropic's billing interface shows aggregate input and cached token counts but omits per-session context growth and the cascading expense triggered when a cache invalidates mid-session. Experts recommend enforcing hard token budgets at the request level before API calls are made, rather than relying on reactive alerts after costs have compounded. Complementary strategies include prompt caching with explicit TTL tracking and context managers that summarize or truncate conversation history at fixed intervals to prevent unbounded spend.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AWS Lambda MicroVMs Offer Isolated Sandboxes for Running Untrusted Code Safely

AWS has released Lambda MicroVMs, Firecracker-based virtual machines designed to safely execute untrusted code in hardware-isolated sandboxes that boot in roughly one second. A developer built a multi-tenant pipeline where users upload CSV files and custom Python transformation functions, both treated as untrusted inputs requiring different security approaches. Uploaded files are scanned for malware using GuardDuty, while code is contained within MicroVMs rather than scanned, since legitimate-looking code can still be destructive. Each sandbox runs with a sealed VPC network blocking all outbound internet traffic, a least-privilege IAM role limited to writing logs, strict memory and timeout limits, and per-tenant S3 Access Points to prevent cross-tenant data access. Testing confirmed that runaway memory usage, infinite loops, and malicious file uploads were each caught by their respective layers before reaching clean storage.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Engineer Ran Just One LLM Cost Experiment and Found It Sufficient

A software engineer set out to determine when expensive frontier AI models are truly necessary versus when cheaper alternatives suffice for real work tasks. He designed a 10-experiment evaluation program, complete with a reusable harness called model-compass, to benchmark multiple LLMs across agent use cases like CI diagnostics, code review, and incident triage. The motivation was personal: at home, every API call comes out of his own pocket, making model selection a financial decision rather than a convenience. He ultimately ran only the first experiment, focused on CI log diagnostics, choosing it because it reflected his team's actual daily pain points across multiple codebases and languages. That single experiment yielded enough actionable insight to inform his model-routing decisions without needing to complete the remaining nine.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer builds Termo, an all-in-one terminal and file workspace in Rust

A developer frustrated by constant context-switching between multiple tools built Termo, a unified terminal and file workspace. Inspired by a weekly code-and-coffee meetup where attendees solved their own workflow problems, the creator set out to consolidate a terminal, editor, file explorer, and notes library into a single window. Termo features recursive split panes, AI coding-agent detection, and a built-in scripts and snippets library. It is built as a single Rust binary using an immediate-mode GUI, avoiding Electron or webviews to keep startup fast and resource usage low. The tool is currently in early release and available via a one-line install command for both Linux/macOS and Windows.

0 comments Read more at DEV Community