Plan
active
ASCII smuggling via invisible Unicode evades email security filters
- Engineer — Learn: ASCII smuggling with invisible Unicode is a useful technique to understand when evaluating email security tooling or building internal phishing-resistant workflows; no patch or configuration change required today.
- SOC/IR — Plan: Add detection coverage for invisible Unicode characters in email bodies and subject lines — tune existing email security filters to flag or quarantine messages containing high-density non-printing Unicode codepoints, and build a hunt query against recent inbound mail logs for this pattern.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.