Proofpoint

Security efficacy claims are only as good as the methodology behind them. If you only count threats that reach a provider’s environment, you're evaluating just a subset of the threat population. Not the full picture.

In a new Proofpoint blog, Ryan Kalember, chief strategy officer, shared the complete findings from our most recent aggregated assessment data spanning 696 production deployments.

Full transparency. No speculation. No lab traffic.

Key findings:

▪️ 27.1% of threats blocked by Proofpoint were missed by Microsoft
▪️ 408 advanced threats delivered per 1,000 users behind Microsoft
▪️ 41.7-minute median dwell time before Microsoft detected threats already condemned by Proofpoint

Our perspective: organizations deserve a fair and complete picture when evaluating prospective security vendors side-by-side.

Read the details to learn about our approach to efficacy analysis and ecosystem outlook. ➡️ https://www.proofpoint.com/us/blog/threat-protection/seeing-full-picture-how-measure-email-security-effectiveness-right-way?utm_source=facebook&utm_medium=social_organic

China-linked threat actor TA4922 is expanding its operations beyond East Asia, targeting organizations across Europe and South Africa with an evolving arsenal.

Proofpoint research recently detailed the group’s rapid growth, localized tactics, and use of new malware families, including Atlas RAT, RomulusLoader, and SilentRunLoader.

https://thehackernews.com/2026/06/china-linked-ta4922-expands-phishing.html via The Hacker News

China-Linked TA4922 Expands Phishing Attacks to U.K., Germany, Italy, and South Africa TA4922 expanded targeting to organizations in the U.K., Germany, Italy, and South Africa while continuing campaigns against East Asia.