Where others have become obsessed with speed and trends, Sergio Membrillas has built a career on slowing down and staying true to his craft. Over 13 years as a professional illustrator, he's evolved a distinct style – bold, graphic, and quietly playful – that feels both timeless and entirely his own. But this evolution, as he's quick to point out, wasn't something he forced. "I believe evolution is essential for every artist," Sergio reflects. "Change is not something I resist; it's something I enjoy and welcome as part of the creative journey." His work, initially influenced by a love of Mid-Century graphic design, has gradually absorbed references as diverse as Etruscan art, Mesopotamian motifs, and early 20th-century traditional tattoos. It's a portfolio built on curiosity, not conformity. Despite his stylistic clarity, Sergio's process remains refreshingly analogue at its core. He still begins each project with pencil and paper, leaning into the tactility of drawing by hand. "I've always valued having a physical relationship with art," he says. "There's something essential about feeling the wood of the pencil, manually erasing mistakes, rather than simply double-tapping a screen." His philosophy of working slowly, attentively, and with purpose shows in the balanced compositions and confident use of negative space that has become his signature. Sergio credits his background in graphic design for this instinctive sense of structure. "There has always been a strong graphic sensibility within me," he says, noting that the discipline of design continues to inform his illustration practice, particularly in editorial and poster work where clarity and storytelling must co-exist. Yet, like many creative careers, his path into illustration wasn't plotted from the start. Initially, Sergio imagined illustration would complement his design projects, not become the main event. "At first, I thought I would incorporate my illustrations into my graphic design projects – but in the end, it turned out to be the other way around." A commission for EasyJet's in-flight magazine marked a pivotal moment that reframed illustration from a hobby to a profession. "It made me realize that being an illustrator is a real profession, just like any other." Fast-forward to today, and Sergio's client list reads like a who's who of publishing and design, from The New Yorker to Pentagram. While the calibre of collaborators has changed, what matters most remains the same: trust. "When a client trusts your work and approaches projects with an open mind, collaboration flourishes," he says. It's in these open, trusting relationships that Sergio finds the space to experiment and further develop his ideas. Unsurprisingly, editorial work holds a special place for him. "Editorial projects offer wider creative margins, allowing for greater flexibility and innovation," he explains. Compared to the tighter confines of advertising, editorial illustration offers the opportunity to tell nuanced stories, and Sergio is clear that he views every assignment, regardless of format, as a collaborative effort. If one thing is clear, though, it's that he's not that he's afraid to say no when needed. Maintaining a strong personal voice is non-negotiable. "I always strive to stay true to myself and ensure that every project I undertake reflects a clear personal signature," he says. For Sergio, authenticity isn't just a matter of artistic pride; it's what differentiates an illustrator in a saturated, increasingly automated industry. Valencia is home for Sergio, a city he credits with much of his creative energy. "Oh, Valencia! It's a beautiful city that inspires me and brings me joy," he says, describing it as a European cousin to Los Angeles with its sun-soaked streets and vibrant cultural scene. The blend of tradition and modernity fuels his practice, offering constant inspiration without the sensory overload that often accompanies larger creative hubs. Given the pressure many creatives feel to keep pace with shifting trends, Sergio's approach feels almost radical. "I'm not particularly interested in trends," he says. "What truly matters to me is the feeling of having done something meaningful and fulfilling by the end of the day." Instead of chasing what's fashionable, he draws inspiration from a surprisingly eclectic bookshelf, mixing everything from Wim Crouwel's graphic design classics to studies on Scandinavian tattoos and Alec Soth's photography. It's a reminder that fresh ideas rarely come from looking where everyone else is looking. In the era of AI and content overload, the role of the illustrator is changing, but Sergio remains optimistic. While machine learning might churn out images at record speed, it can't replicate the nuance and emotional intelligence that underpin great illustration. "Illustrators can tell stories, evoke emotions, and create meaningful connections that machines simply cannot replicate," he says. "Our role is shifting, but the value of authentic, thoughtful illustration remains indispensable." That insistence on authenticity carries through to the advice he offers younger illustrators navigating a commercial landscape. "Create work that makes you happy when you go to sleep at night," Sergio advises. "It's important to find projects that align with your values and passions so your artistic voice remains authentic." It's an ethos that has carried him through more than a decade of creative highs and industry shifts. Perhaps it's the real secret behind the clarity of his practice, which he has built not on chasing trends or algorithms but on careful craft, deliberate evolution, and the simple, enduring joy of a well-made pencil and a blank piece of paper.

Japan-based Ispace confirmed its Resilience lander likely crashed during its second failed attempt at a lunar landing, after a sensor malfunction prevented proper deceleration. Despite the setback, the company remains committed to future missions, with funding secured for a third attempt using a new lander, Apex 1.0, scheduled for 2027. "Until then, Ispace has its work cut out for it," reports CNN. "[Ispace CEO and founder Takeshi Hakamada] said during the news briefing he will need to work to regain the trust of investors, and the company will need to deeply investigate what went wrong on the Resilience mission to ensure similar issues don't plague Apex 1.0." The company has ambitious "plans to eventually build a city on the lunar surface that would house a thousand people and welcome thousands more for tourist visits," notes ABC News. "If ispace is going to establish a colony on the moon, it will need to identify an ample supply of ice or water, which it will convert into fuel for a future lunar fueling station. The ability to produce fuel on the moon will enable the company to transport people back and forth between the Earth and the moon." Read more of this story at Slashdot.

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. Microsoft 365 Word gets SharePoint eSignature, now you can ditch third-party signing tools Paul Hill Neowin @ziks_99 · Jun 6, 2025 03:02 EDT Microsoft has just announced that it will be rolling out an extremely convenient feature for Microsoft 365 customers who use Word throughout this year. The Redmond giant said that you’ll now be able to use SharePoint’s native eSignature service directly in Microsoft Word. The new feature allows customers to request electronic signatures without converting the documents to a PDF or leaving the Word interface, significantly speeding up workflows. Microsoft’s integration of eSignatures also allows you to create eSignature templates which will speed up document approvals, eliminate physical signing steps, and help with compliance and security in the Microsoft 365 environment. This change has the potential to significantly improve the quality-of-life for those in work finding themselves adding lots of signatures to documents as they will no longer have to export PDFs from Word and apply the signature outside of Word. It’s also key to point out that this feature is integrated natively and is not an extension. The move is quite clever from Microsoft, if businesses were using third-party tools to sign their documents, they would no longer need to use these as it’s easier to do it in Word. Not only does it reduce reliance on other tools, it also makes Microsoft’s products more competitive against other office suites such as Google Workspace. Streamlined, secure, and compliant The new eSignature feature is tightly integrated into Word. It lets you insert signature fields seamlessly into documents and request other people’s signatures, all while remaining in Word. The eSignature feature can be accessed in Word by going to the Insert ribbon. When you send a signature request to someone from Word, the recipient will get an automatically generated PDF copy of the Word document to sign. The signed PDF will then be kept in the same SharePoint location as the original Word file. To ensure end-to-end security and compliance, the document never leaves the Microsoft 365 trust boundary. For anyone with a repetitive signing process, this integration allows you to turn Word documents into eSignature templates so they can be reused. Another feature that Microsoft has built in is audit trail and notifications. Both the senders and signers will get email notifications throughout the entire signing process. Additionally, you can view the activity history (audit trail) in the signed PDF to check who signed it and when. Finally, Microsoft said that administrators will be able to control how the feature is used in Word throughout the organization. They can decide to enable it for specific users via an Office group policy or limit it to particular SharePoint sites. The company said that SharePoint eSignature also lets admins log activities in the Purview Audit log. A key security measure included by Microsoft, which was mentioned above, was the Microsoft 365 trust boundary. By keeping documents in this boundary, Microsoft ensures that all organizations can use this feature without worry. The inclusion of automatic PDF creation is all a huge benefit to users as it will cut out the step of manual PDF creation. While creating a PDF isn’t complicated, it can be time consuming. The eSignature feature looks like a win-win-win for organizations that rely on digital signatures. Not only does it speed things along and remain secure, but it’s also packed with features like tracking, making it really useful and comprehensive. When and how your organization gets it SharePoint eSignature has started rolling out to Word on the M365 Beta and Current Channels in the United States, Canada, the United Kingdom, Europe, and Australia-Pacific. This phase of the rollout is expected to be completed by early July. People in the rest of the world will also be gaining this time-saving feature but it will not reach everyone right away, though Microsoft promises to reach everybody by the end of the year. To use the feature, it will need to be enabled by administrators. If you’re an admin who needs to enable this, just go to the M365 Admin Center and enable SharePoint eSignature, ensuring the Word checkbox is selected. Once the service is enabled, apply the “Allow the use of SharePoint eSignature for Microsoft Word” policy. The policy can be enabled via Intune, Group Policy manager, or the Cloud Policy service for Microsoft 365 Assuming the admins have given permission to use the feature, users will be able to access SharePoint eSignatures on Word Desktop using the Microsoft 365 Current Channel or Beta Channel. The main caveats include that the rollout is phased, so you might not get it right away, and it requires IT admins to enable the feature - in which case, it may never get enabled at all. Overall, this feature stands to benefit users who sign documents a lot as it can save huge amounts of time cumulatively. It’s also good for Microsoft who increase organizations’ dependence on Word. Tags Report a problem with article Follow @NeowinFeed

Email authentication protocols like SPF, DKIM, and DMARC play a critical role in protecting domains from spoofing and phishing. However, when SEGs are introduced into the email path, the interaction with these protocols becomes more complex. Security gateways(SEGs) are a core part of many organizations’ email infrastructure. They act as intermediaries between the public internet and internal mail systems, inspecting, filtering, and routing messages. This blog examines how security gateways handle SPF, DKIM, and DMARC, with real-world examples from popular gateways such as Proofpoint, Mimecast, and Avanan. We’ll also cover best practices for maintaining authentication integrity and avoiding misconfigurations that can compromise email authentication or lead to false DMARC failures. Security gateways often sit at the boundary between your organization and the internet, managing both inbound and outbound email traffic. Their role affects how email authentication protocols behave. An inbound SEG examines emails coming into your organization. It checks SPF, DKIM, and DMARC to determine if the message is authentic and safe before passing it to your internal mail servers. An outbound SEG handles emails sent from your domain. It may modify headers, rewrite envelope addresses, or even apply DKIM signing. All of these can impact SPF,  DKIM, or DMARC validation on the recipient’s side. Understanding how SEGs influence these flows is crucial to maintaining proper authentication and avoiding unexpected DMARC failures. Inbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When an email comes into your organization, your security gateway is the first to inspect it. It checks whether the message is real, trustworthy, and properly authenticated. Let’s look at how different SEGs handle these checks. Avanan (by Check Point) SPF: Avanan verifies whether the sending server is authorized to send emails for the domain by checking the SPF record. DKIM: It verifies if the message was signed by the sending domain and if that signature is valid. DMARC: It uses the results of the SPF and DKIM check to evaluate DMARC. However, final enforcement usually depends on how DMARC is handled by Microsoft 365 or Gmail, as Avanan integrates directly with them. Avanan offers two methods of integration:1. API integration: Avanan connects via APIs, no change in MX, usually Monitor or Detect modes.2. Inline integration: Avanan is placed inline in the mail flow (MX records changed), actively blocking or remediating threats. Proofpoint Email Protection SPF: Proofpoint checks SPF to confirm the sender’s IP is authorized to send on behalf of the domain. You can set custom rules (e.g. treat “softfail” as “fail”). DKIM: It verifies DKIM signatures and shows clear pass/fail results in logs. DMARC: It fully evaluates DMARC by combining SPF and DKIM results with alignment checks. Administrators can configure how to handle messages that fail DMARC, such as rejecting, quarantining, or delivering them. Additionally, Proofpoint allows whitelisting specific senders you trust, even if their emails fail authentication checks. Integration Methods Inline Mode: In this traditional deployment, Proofpoint is positioned directly in the email flow by modifying MX records. Emails are routed through Proofpoint’s infrastructure, allowing it to inspect and filter messages before they reach the recipient’s inbox. This mode provides pre-delivery protection and is commonly used in on-premises or hybrid environments. API-Based (Integrated Cloud Email Security – ICES) Mode: Proofpoint offers API-based integration, particularly with cloud email platforms like Microsoft 365 and Google Workspace. In this mode, Proofpoint connects to the email platform via APIs, enabling it to monitor and remediate threats post-delivery without altering the email flow. This approach allows for rapid deployment and seamless integration with existing cloud email services. Mimecast SPF: Mimecast performs SPF checks to verify whether the sending server is authorized by the domain’s SPF record. Administrators can configure actions for SPF failures, including block, quarantine, permit, or tag with a warning. This gives flexibility in balancing security with business needs. DKIM: It validates DKIM signatures by checking that the message was correctly signed by the sending domain and that the content hasn’t been tampered with. If the signature fails, Mimecast can take actions based on your configured policies. DMARC: It fully evaluates DMARC by combining the results of SPF and DKIM with domain alignment checks. You can choose to honor the sending domain’s DMARC policy (none, quarantine, reject) or apply custom rules, for example, quarantining or tagging messages that fail DMARC regardless of the published policy. This allows more granular control for businesses that want to override external domain policies based on specific contexts. Integration Methods Inline Deployment: Mimecast is typically deployed as a cloud-based secure email gateway. Organizations update their domain’s MX records to point to Mimecast, so all inbound (and optionally outbound) emails pass through it first. This allows Mimecast to inspect, filter, and process emails before delivery, providing robust protection. API Integrations: Mimecast also offers API-based services through its Mimecast API platform, primarily for management, archival, continuity, and threat intelligence purposes. However, API-only email protection is not Mimecast’s core model. Instead, the APIs are used to enhance the inline deployment, not replace it. Barracuda Email Security Gateway SPF: Barracuda checks the sender’s IP against the domain’s published SPF record. If the check fails, you can configure the system to block, quarantine, tag, or allow the message, depending on your policy preferences. DKIM: It validates whether the incoming message includes a valid DKIM signature. The outcome is logged and used to inform further policy decisions or DMARC evaluations. DMARC: It combines SPF and DKIM results, checks for domain alignment, and applies the DMARC policy defined by the sender. Administrators can also choose to override the DMARC policy, allowing messages to pass or be treated differently based on organizational needs (e.g., trusted senders or internal exceptions). Integration Methods Inline mode (more common and straightforward): Barracuda Email Security Gateway is commonly deployed inline by updating your domain’s MX records to point to Barracuda’s cloud or on-premises gateway. This ensures that all inbound emails pass through Barracuda first for filtering and SPF, DKIM, and DMARC validation before being delivered to your mail servers. Deployment Behind the Corporate Firewall: Alternatively, Barracuda can be deployed in transparent or bridge mode without modifying MX records. In this setup, the gateway is placed inline at the network level, such as behind a firewall, and intercepts mail traffic transparently. This method is typically used in complex on-premises environments where changing DNS records is not feasible. Cisco Secure Email (formerly IronPort) Cisco Secure Email acts as an inline gateway for inbound email, usually requiring your domain’s MX records to point to the Cisco Email Security Appliance or cloud service. SPF: Cisco Secure Email verifies whether the sending server is authorized in the sender domain’s SPF record. Administrators can set detailed policies on how to handle SPF failures. DKIM: It validates the DKIM signature on incoming emails and logs whether the signature is valid or has failed. DMARC: It evaluates DMARC by combining SPF and DKIM results along with domain alignment checks. Admins can configure specific actions, such as quarantine, reject, or tag, based on different failure scenarios or trusted sender exceptions. Integration methods On-premises Email Security Appliance (ESA): You deploy Cisco’s hardware or virtual appliance inline, updating MX records to route mail through it for filtering. Cisco Cloud Email Security: Cisco offers a cloud-based email security service where MX records are pointed to Cisco’s cloud infrastructure, which filters and processes inbound mail. Cisco Secure Email also offers advanced, rule-based filtering capabilities and integrates with Cisco’s broader threat protection ecosystem, enabling comprehensive inbound email security. Outbound Handling of SPF, DKIM, and DMARC by Common Security Gateways When your organization sends emails, security gateways can play an active role in processing and authenticating those messages. Depending on the configuration, a gateway might rewrite headers, re-sign messages, or route them through different IPs – all actions that can help or hurt the authentication process. Let’s look at how major SEGs handle outbound email flow. Avanan – Outbound Handling and Integration Methods Outbound Logic Avanan analyzes outbound emails primarily to detect data loss, malware, and policy violations. In API-based integration, emails are sent directly by the original mail server (e.g., Microsoft 365 or Google Workspace), so SPF and DKIM signatures remain intact. Avanan does not alter the message or reroute traffic, which helps maintain full DMARC alignment and domain reputation. Integration Methods 1. API Integration: Connects to Microsoft 365 or Google Workspace via API. No MX changes are needed. Emails are scanned after they are sent, with no modification to SPF, DKIM, or the delivery path.  How it works: Microsoft Graph API or Google Workspace APIs are used to monitor and intervene in outbound emails. Protection level: Despite no MX changes, it can offer inline-like protection, meaning it can block, quarantine, or encrypt emails before they are delivered externally. SPF/DKIM/DMARC impact: Preserves original headers and signatures since mail is sent directly from Microsoft/Google servers. 2. Inline Integration: Requires changing MX records to route email through Avanan. In this mode, Avanan can intercept and inspect outbound emails before delivery. Depending on the configuration, this may affect SPF or DKIM if not properly handled. How it works: Requires adding Avanan’s Protection level: Traditional inline security with full visibility and control, including encryption, DLP, policy enforcement, and advanced threat protection. SPF/DKIM/DMARC impact: SPF configuration is needed by adding Avanan’s include mechanism to the sending domain’s SPF record. The DKIM record of the original sending source is preserved. For configurations, you can refer to the steps in this blog. Proofpoint – Outbound Handling and Integration Methods Outbound Logic Proofpoint analyzes outbound emails to detect and prevent data loss (DLP), to identify advanced threats (malware, phishing, BEC) originating from compromised internal accounts, and to ensure compliance. Their API integration provides crucial visibility and powerful remediation capabilities, while their traditional gateway (MX record) deployment delivers true inline, pre-delivery blocking for outbound traffic. Integration methods 1. API Integration: No MX record changes are required for this deployment method. Integration is done with Microsoft 365 or Google Workspace. How it works: Through its API integration, Proofpoint gains deep visibility into outbound emails and provides layered security and response features, including: Detect and alert: Identifies sensitive content (Data Loss Prevention violations), malicious attachments, or suspicious links in outbound emails. Post-delivery remediation (TRAP): A key capability of the API model is Threat Response Auto-Pull (TRAP), which enables Proofpoint to automatically recall, quarantine, or delete emails after delivery. This is particularly useful for internally sent messages or those forwarded to other users. Enhanced visibility: Aggregates message metadata and logs into Proofpoint’s threat intelligence platform, giving security teams a centralized view of outbound risks and user behavior. Protection level: API-based integration provides strong post-delivery detection and response, as well as visibility into DLP incidents and suspicious behavior.  SPF/DKIM/DMARC impact: Proofpoint does not alter SPF, DKIM, or DMARC because emails are sent directly through Microsoft or Google servers. Since Proofpoint’s servers are not involved in the actual sending process, the original authentication headers remain intact. 2. Gateway Integration (MX Record/Smart Host): This method requires updating MX records or routing outbound mail through Proofpoint via a smart host. How it works: Proofpoint acts as an inline gateway, inspecting emails before delivery. Inbound mail is filtered via MX changes; outbound mail is relayed through Proofpoint’s servers. Threat and DLP filtering: Scans outbound messages for sensitive content, malware, and policy violations. Real-time enforcement: Blocks, encrypts, or quarantines emails before they’re delivered. Policy controls: Applies rules based on content, recipient, or behavior. Protection level: Provides strong, real-time protection for outbound traffic with pre-delivery enforcement, DLP, and encryption. SPF/DKIM/DMARC impact: Proofpoint becomes the sending server: SPF: You need to configure ProofPoint’s SPF. DKIM: Can sign messages; requires DKIM setup. DMARC: DMARC passes if SPF and DKIM are set up properly. Please refer to this article to configure SPF and DKIM for ProofPoint. Mimecast – Outbound Handling and Integration Methods Outbound Logic Mimecast inspects outbound emails to prevent data loss (DLP), detect internal threats such as malware and impersonation, and ensure regulatory compliance. It primarily functions as a Secure Email Gateway (SEG), meaning it sits directly in the outbound email flow. While Mimecast offers APIs, its core outbound protection is built around this inline gateway model. Integration Methods 1. Gateway Integration (MX Record change required) This is Mimecast’s primary method for outbound email protection. Organizations route their outbound traffic through Mimecast by configuring their email server (e.g., Microsoft 365, Google Workspace, etc.) to use Mimecast as a smart host. This enables Mimecast to inspect and enforce policies on all outgoing emails in real time. How it works: Updating outbound routing in your email system (smart host settings), or Using Mimecast SMTP relay to direct messages through their infrastructure. Mimecast then scans, filters, and applies policies before the email reaches the final recipient. Protection level: Advanced DLP: Identifies and prevents sensitive data leaks. Impersonation and Threat Protection: Blocks malware, phishing, and abuse from compromised internal accounts. Email Encryption and Secure Messaging: Applies encryption policies or routes messages via secure portals. Regulatory Compliance: Enforces outbound compliance rules based on content, recipient, or metadata. SPF/DKIM/DMARC impact: SPF: Your SPF record must include Mimecast’s SPF mechanism based on your region to avoid SPF failures. DKIM: A new DKIM record should be configured to make sure your emails are DKIM signed when routing through Mimecast. DMARC: With correct SPF and DKIM setup, Mimecast ensures DMARC alignment, maintaining your domain’s sending reputation. Please refer to the steps in this detailed article to set up SPF and DKIM for Mimecast. 2. API Integration (Complementary to Gateway) Mimecast’s APIs complement the main gateway by providing automation, reporting, and management tools rather than handling live outbound mail flow. They allow you to manage policies, export logs, search archived emails, and sync users. APIs enhance visibility and operational tasks but do not provide real-time filtering or blocking of outbound messages. Since APIs don’t process live mail, they have no direct effect on SPF, DKIM, or DMARC; those depend on your gateway (smart host) setup. Barracuda – Outbound Handling and Integration Methods Outbound Logic Barracuda analyzes outbound emails to prevent data loss (DLP), block malware, stop phishing/impersonation attempts from compromised internal accounts, and ensure compliance. Barracuda offers flexible deployment options, including both traditional gateway (MX record) and API-based integrations. While both contribute to outbound security, their roles are distinct. Integration Methods 1. Gateway Integration (MX Record / Smart Host) — Primary Inline Security How it works: All outbound emails pass through Barracuda’s security stack for real-time inspection, threat blocking, and policy enforcement before delivery. Protection level: Comprehensive DLP (blocking, encrypting, or quarantining sensitive content)  Outbound spam and virus filtering  Enforcement of compliance and content policies This approach offers a high level of control and immediate threat mitigation on outbound mail flow. SPF/DKIM/DMARC impact: SPF: Update SPF records to include Barracuda’s sending IPs or SPF include mechanism. DKIM: Currently, no explicit setup is needed; DKIM of the main sending source is preserved. Refer to this article for more comprehensive guidance on Barracuda SEG configuration. 2. API Integration (Complementary & Advanced Threat Focus) How it works: The API accesses cloud email environments to analyze historical and real-time data, learning normal communication patterns to detect anomalies in outbound emails. It also supports post-delivery remediation, enabling the removal of malicious emails from internal mailboxes after sending. Protection level: Advanced AI-driven detection and near real-time blocking of outbound threats, plus strong post-delivery cleanup capabilities. SPF/DKIM/DMARC impact: Since mail is sent directly by the original mail server (e.g., Microsoft 365), SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. Cisco Secure Email (formerly IronPort) – Outbound Handling and Integration Methods Outbound Logic Cisco Secure Email protects outbound email by preventing data loss (DLP), blocking spam and malware from internal accounts, stopping business email compromise (BEC) and impersonation attacks, and ensuring compliance. Cisco provides both traditional gateway appliances/cloud gateways and modern API-based solutions for layered outbound security. Integration Methods 1. Gateway Integration (MX Record / Smart Host) – Cisco Secure Email Gateway (ESA) How it works: Organizations update MX records to route mail through the Cisco Secure Email Gateway or configure their mail server (e.g., Microsoft 365, Exchange) to smart host outbound email via the gateway. All outbound mail is inspected and policies enforced before delivery. Protection level: Granular DLP (blocking, encrypting, quarantining sensitive content) Outbound spam and malware filtering to protect IP reputation Email encryption for sensitive outbound messages Comprehensive content and attachment policy enforcement SPF: Check this article for comprehensive guidance on Cisco SPF settings. DKIM: Refer to this article for detailed guidance on Cisco DKIM settings. 2. API Integration – Cisco Secure Email Threat Defense How it works: Integrates directly via API with Microsoft 365 (and potentially Google Workspace), continuously monitoring email metadata, content, and user behavior across inbound, outbound, and internal messages. Leverages Cisco’s threat intelligence and AI to detect anomalous outbound activity linked to BEC, account takeover, and phishing. Post-Delivery Remediation: Automates the removal or quarantine of malicious or policy-violating emails from mailboxes even after sending. Protection level: Advanced, AI-driven detection of sophisticated outbound threats with real-time monitoring and automated remediation. Complements gateway filtering by adding cloud-native visibility and swift post-send action. SPF/DKIM/DMARC impact: Since emails are sent directly by the original mail server, SPF and DKIM signatures remain intact, preserving DMARC alignment and domain reputation. If you have any questions or need assistance, feel free to reach out to EasyDMARC technical support.

Posted on : June 5, 2025 By Tech World Times Technology  Rate this post The Software as a Service (SaaS) industry has been on an unstoppable trajectory since its inception, revolutionizing how businesses and individuals consume and manage software. The landscape of subscription services within this sector continues to evolve at a rapid pace. Driven by customer expectations, technological advancements, and economic shifts, several trends are emerging that promise to reshape the SaaS industry. These trends will not only influence the way software is delivered and managed but also impact the overall subscription economy. Check out these subscription trends that are set to redefine the SaaS industry in the next few years. 1. Personalization and Customer-Centric Models Businesses are increasingly recognizing the value of tailored experiences, and SaaS companies are responding with personalized subscription offerings. By leveraging user data and machine learning algorithms, providers are crafting customized solutions that cater to individual needs, preferences, and usage patterns. Personalization also extends to the billing process, where SaaS payment processing systems are adapting to offer flexible pricing models, such as pay-per-use and tiered subscriptions. 2. Integrated Payment Solutions and Subscription Management SaaS payment processing will become a seamless and integrated part of the subscription experience. Innovations in financial technology will streamline the billing process, providing users with a unified dashboard to manage all their subscriptions. This will simplify financial management for both consumers and businesses. Companies will be able to offer various payment methods, automate billing cycles, and handle currency conversions with ease, making it easier for them to serve a global customer base. 3. The Rise of Usage-Based Pricing Usage-based pricing is gaining traction as a fair and transparent way to bill for cloud services. Instead of flat monthly or annual fees, SaaS providers will charge customers based on the actual resources consumed. This model aligns the cost with the value derived, encouraging more efficient use of resources and reducing waste. It also allows companies to scale more easily, leading to more granular and sophisticated pricing structures that can handle these complex calculations. 4. Subscription Model Innovation To stand out in a crowded market, SaaS companies are experimenting with innovative subscription models that go beyond the typical monthly or annual plans. These include freemium models, where users get a basic version of the software for free and pay for additional features, and dynamic pricing that adjusts based on demand and supply. The goal is to create a more nuanced pricing strategy that appeals to a wider range of customers and enhances the overall perceived value of the service. 5. Emphasis on User Experience and Customer Retention The importance of user experience is paramount in the SaaS industry, and in 2025, companies will invest heavily in creating delightful onboarding processes, intuitive user interfaces, and proactive customer support. The focus on customer retention will be a key driver for subscription growth, as it becomes more cost-effective than acquiring new ones. This shift will lead to the integration of more sophisticated tools for tracking customer engagement and satisfaction, allowing for targeted interventions to reduce churn rates. 6. Expansion into Emerging Markets As developed markets become saturated, SaaS companies are setting their sights on emerging economies. To cater to these diverse markets, providers will need to adapt their offerings to suit local preferences and constraints, such as language, cultural nuances, and payment methods. This trend will result in the rise of regional SaaS leaders and increased competition from local players, pushing the industry to become more global and inclusive. 7. Increased Adoption of AI and Automation Artificial intelligence and automation will play a significant role in the SaaS industry, optimizing everything from customer support to sales and marketing. Chatbots and virtual assistants will become commonplace for handling routine inquiries, while AI algorithms will be used to predict customer behavior and offer personalized recommendations. Automation will streamline backend processes, reducing costs and enhancing the overall efficiency of subscription management. This integration will lead to more intelligent and proactive services, with the potential for predictive analytics to anticipate customer needs before they even arise. The SaaS industry is poised for continued growth and evolution, with these seven subscription trends at the forefront. Personalization, integrated payment processing, usage-based pricing, innovative models, user experience enhancements, emerging market expansion, and the integration of AI and automation are all shaping the future of this dynamic sector. The most successful SaaS companies will be those that embrace these trends, adapting their offerings and operations to meet the changing demands of the modern subscription economy. With the right strategies in place, they will be able to deliver superior value to their customers and thrive in an increasingly competitive landscape. Tech World TimesTech World Times (TWT), a global collective focusing on the latest tech news and trends in blockchain, Fintech, Development & Testing, AI and Startups. If you are looking for the guest post then contact at techworldtimes@gmail.com

Two satellite heavyweights are about to form a European rival to Starlink. But they’ll face an uphill battle to compete with Elon Musk’s firm. Luxembourg-based SES’ proposed $3.1bn takeover of Intelsat is set to get the green light from EU officials, Reuters reports. A final verdict is expected by June 10.   SES first announced plans to acquire Luxembourgish-American rival Intelsat in April 2024, calling it a “transformational merger” that could reshape the satellite internet market. The merged company would have a fleet of more than 100 geostationary and 26 medium Earth orbit satellites. Intelsat would contribute 75 of those probes, which provide a range of services, including TV, radio, satellite internet, and secure communications for governments and militaries. A SES-Intelsat tie-up would create Europe’s second-largest satellite internet provider, after Franco-British firm Eutelsat. Smaller contenders include the UK’s Inmarsat and Spain’s Hisdesat.  Combined, Europe’s satellite firms could offer the continent much-sought alternatives to Musk’s Starlink or Amazon’s Project Kuiper, at a time when tech sovereignty is high on the political agenda.  European leaders are increasingly concerned about relying on Starlink. Their fears have been stoked by reports that US officials threatened to cut off the system in Ukraine if the country didn’t meet their demands on sharing its mineral wealth.   The situation raised doubts about the security implications of Ukraine — and broader Europe — relying on a single, privately owned network whose boss has direct ties to the Trump administration. Eustalstat, SES, Inmarsat, and Hisdesat reportedly entered talks with EU governments in March about providing back-up connectivity to Ukraine.  Despite the SES–Intelsat merger creating a more formidable European player, the new alliance will still face a daunting challenge against Starlink’s dominance.  Musk’s firm dwarfs its competitors in satellite numbers, with over 7,000 in low-Earth orbit (LEO). Its closest rival, Eutelsat, has around 600. Meanwhile, Amazon’s Project Kuiper is planning to deploy a constellation of 3,236 satellites.   Being part of SpaceX also affords Starlink direct access to satellite manufacturing and launch capacity. In contrast, SES and Intelsat depend on third-party launch providers and currently lack a proprietary low-Earth orbit network. While Intelsat has a $250mn agreement to access Eutelsat’s LEO capacity, this reliance on external constellations puts the merged entity at a disadvantage.  Even when combined with Europe’s other players — including Eutelsat, Inmarsat, and Hisdesat — the proposed merger pales in comparison. As European policymakers push for strategic autonomy in space, the SES–Intelsat merger may be a step in the right direction, but it’s still a far cry from a true Starlink rival.

Elon Musk is contemplating decommissioning SpaceX's Dragon spacecraft, responding to President Donald Trump's apparent intent to terminate government subsidies and contracts with the billionaire's companies. It looks like the feud between the former allies has quickly turned vicious.SpaceX's CEO initially announced that the company would retire its Dragon spacecraft in an X post on Thursday, with Musk sharing a screenshot of a post published on Trump's Truth Social account earlier in the day."The easiest way to save money in our Budget, Billions and Billions of Dollars, is to terminate Elon’s Governmental Subsidies and Contracts," said Trump in the screenshotted post. "I was always surprised that Biden didn’t do it!" You May Also Like "In light of the President’s statement about cancellation of my government contracts, @SpaceX will begin decommissioning its Dragon spacecraft immediately," Musk wrote on X.SpaceX's Dragon spacecraft are a family of vehicles designed to carry passengers and cargo. The National Aeronautics and Space Administration (NASA) has previously relied upon them to transport astronauts to and from the International Space Station (ISS). Mere hours prior to Musk's announcement, SpaceX posted on X that it was preparing to launch a Dragon next Tuesday.For a few hours, it seemed reasonable to assume that this launch would now not go ahead. However, Musk then appeared to quickly walk back his decision. Responding to an X user advising him to "cool off and take a step back for a couple days," the billionaire subsequently stated that Dragon will not be decommissioned after all.It's unclear whether Musk's initial announcement was sincere, or whether his apparent about-face might be sarcastic. Musk has a history of making flippant comments online with no apparent regard to their consequences. What is clear is that Musk and Trump's relationship is well past the honeymoon phase, and now looks much more like an ugly divorce.If Trump does terminate government contracts with Musk's companies, it would deal a significant blow to the billionaire. According to a Washington Post investigation, NASA has invested over $15 billion in SpaceX alone. When put together with Musk's other companies such as EV automaker Tesla, his various businesses have received at least $38 billion in government contracts, loans, subsidies, and tax credits. Mashable Trend Report: Coming Soon! Decode what’s viral, what’s next, and what it all means. Sign up for Mashable’s weekly Trend Report newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up! Musk and Trump go through messy public breakup Credit: Roberto Schmidt / AFP via Getty Images Musk's relationship with Trump has significantly deteriorated in recent days. The billionaire announced that he was leaving his position as de facto head of the Department of Government Efficiency (DOGE) last Wednesday, just one day after he criticised Trump's tax bill as undermining its work. The split was presented as amicable at the time, with Trump presenting Musk with a golden key and words of praise. However, their love affair has quickly turned sour.Musk continued to lambast Trump's bill after his departure from DOGE, arguing that it will increase government debt by trillions of dollars. Strongly disagreeing with the president's characterisation of the proposed legislation as a "Big Beautiful Bill," Musk labelled it a "disgusting abomination" and has been calling for lawmakers to crush it.For his part, Trump has claimed that Musk is simply throwing a tantrum because the bill supposedly cut an alleged "EV mandate." The president stated on Thursday that he had asked the billionaire to leave his administration, and that Musk had been "wearing thin.""I took away his EV Mandate that forced everyone to buy Electric Cars that nobody else wanted (that he knew for months I was going to do!), and he just went CRAZY!" Trump claimed. Despite Trump's assertions, he did not abolish any EV mandate as there has never been any U.S. law which makes switching to an electric car mandatory. However, Trump has taken several anti-EV measures since his inauguration, including abolishing incentives encouraging EV adoption, pausing $3 billion in funding for a U.S. charging network, and introducing a $250 annual fee for EV users in his recent tax bill. Related Stories Trump's claim about Musk is an interesting contrast to his statements in March, when he praised the billionaire for not complaining about the supposed end of the non-existent EV mandate. The president made the comments while he and Musk co-hosted a Tesla ad on the White House lawn in an effort to boost the company's cratering stock prices.Tesla's struggling share value has now fallen again amidst Musk's feud with Trump, plummeting more than 14 percent on Thursday to wipe out over $150 billion in value."I don’t mind Elon turning against me, but he should have done so months ago," Trump wrote on Thursday.Meanwhile, Musk went all-in attacking Trump on Thursday, claiming that the president is linked to child sex offender Jeffrey Epstein and sharing posts calling for him to be impeached. Musk has also hit out at Trump's tariffs on international trade, predicting that they will "cause a recession in the second half of the year.""Without me, Trump would have lost the election," Musk alleged on X. "Such ingratitude."

Anysphere, the maker of AI coding assistant Cursor, has raised $900 million at a $9.9 billion valuation, Bloomberg reported. The round was led by returning investor Thrive Capital, with participation from Andreessen Horowitz, Accel, and DST Global. The massive round is Anysphere’s third fundraise in less than a year. The 3-year-old startup secured its previous capital haul of $100 million at a pre-money valuation of $2.5 billion late last year, as TechCrunch was first to report.  AI coding assistants, often referred to as “vibe coders,” have emerged as one of AI’s most popular applications, with Cursor leading the category. Anysphere’s annualized revenue (ARR) has been doubling approximately every two months, a person familiar with the company told TechCrunch. The company has surpassed $500 million in ARR, sources told Bloomberg, a 60% increase from the $300 million we reported in mid-April. Cursor offers developers tiered pricing. After a two-week free trial, the company converts users into paying customers, who can opt for either a $20 Pro offering or a $40 monthly business subscription. Until recently, the majority of the company’s revenue came from individual user subscriptions, Bloomberg reported. However, Anysphere is now offering enterprise licenses, allowing companies to purchase the application for their teams at a higher price point. Earlier this year, the company was approached by OpenAI and other potential buyers, but Anysphere turned down those offers. The ChatGPT maker bought Windsurf, another fast-growing AI assistant, reportedly for $3 billion.

Upcoming (serious) Web performance boostBy: Adam Scott5 June 2025Progress ReportSometimes, just adding a compiler flag can yield significant performance boosts. And that just happened.For about two years now, all major browsers have supported WASM (WebAssembly) SIMD. SIMD stands for “Single instruction, multiple data” and is a technology that permits CPUs to do some parallel computation, often speeding up the whole program. And that’s exactly why we tried it out recently.We got positive results.The need for performance on the WebThe Web platform is often overlooked as a viable target, because of its less-than-ideal environment and its perceived poor performance. And the perception is somewhat right: the Web environment has a lot of security-related quirks to take into account—the user needs to interact with a game frame before the browser allows it to play any sound1. Also, due to bandwidth and compatibility reasons, you rarely see high-fidelity games being played on a browser. Performance is better achieved when running software natively on the operating system.But don’t underestimate the potential of the Web platform. As I explained in broad terms at the talk I gave at the last GodotCon Boston 2025, the Web has caught up a lot since the days of Flash games. Not only are there more people playing Web games every year, but standards and browsers improve every year in functionality and in performance.And that’s why we are interested in using WASM SIMD.WASM SIMD BenchmarksOur resident benchmark expert Hugo Locurcio (better known as Calinou) ran the numbers for us on a stress test I made. We wanted to compare standard builds to builds with WASM SIMD enabled.Note: You may try to replicate his results, but be aware that he has a beast of a machine. Here are his PC’s specifications:CPU: Intel Core i9-13900KGPU: NVIDIA GeForce RTX 4090RAM: 64 GB (2×32 GB DDR5-5800 CL30)SSD: Solidigm P44 Pro 2 TBOS: Linux (Fedora 42)I built a Jolt physics stress test from a scene initially made by passivestar. By spawning more and more barrels into the contraption, we can easily test the performance difference between the WASM SIMD build and the other.Without WASM SIMDWith WASM SIMDImprovement (approx.)Test linksLinkLink-Firefox 138(“+100 barrels” 3 times)2×Firefox 138(“+100 barrels” 6 times)10.17×*Chromium 134(“+100 barrels” 3 times)1.37×Chromium 134(“+100 barrels” 6 times)14.17×**Please note that once the physics engine enters a “spiral of death”, it is common for the framerate to drop to single digits, SIMD or not. These tests don’t prove 10× to 15× CPU computing speed improvements, but rather that games will be more resilient to framerate drops on the same machine in the same circumstances. The 1.5× to 2× numbers are more representative here of the performance gains by WASM SIMD.What it means for your gamesStarting with 4.5 dev 5, you can expect your Web games to run a little bit more smoothly, without having to do anything. Especially when things get chaotic (for your CPU). It isn’t a silver bullet for poorly optimized games, but it will help nonetheless. Also, note that it cannot do anything for GPU rendering bottlenecks.Be aware that the stress tests are meant by nature to only test the worst case scenarios, so you may not see such large improvements in normal circumstances. But it’s nice to see such stark improvements when the worst happens.AvailabilityFrom here on out, the 4.5 release official templates will only support WebAssembly SIMD-compatible browsers in order to keep the template sizes small. We generally aim to maintain compatibility with the oldest devices we can. But in this case, the performance gains are too large to ignore and the chances of users having browsers that are that far out of date is too small relative to the potential benefits.If you need to use non-SIMD templates, don’t fret. You can always build the Godot Editor and the engine templates without WebAssembly SIMD support by using the wasm_simd=no build option.What’s next?As I wrote in my last blog post, we’re currently working very hard to make C#/.NET exports a reality. We do have a promising prototype, we just need to make sure that it’s production-ready.I also mentioned in that article that I wanted to concentrate on improving our asset loading game. Preloading an entire game before even starting it hinders the ability to use Godot for commercial Web games. Once something is implemented to improve that issue, count on me to share the news with you.It’s either that, or we return to the old days of spam-webpages using the “Congratulations, you won!” sound effect when you least expect it. ↩

Nailing cross-channel marketing for your app is crucial in today’s ecosystem. This isn’t just a speculation, it’s a hard fact: the average mobile marketer uses 5 or fewer media sources, but CPIs tend to be much higher for marketers using 6 or more media sources, according to a report by Singular and ironSource Aura.It’s time to start looking elsewhere for users. Something to consider is returning to old-school, tried-and-true strategies that have taken a backseat as the industry has advanced, such as web acquisition campaigns. There are two clicks in these campaigns - the first click directs users from an ad to a web landing page and the second click directs users from the web page to the app store. While the funnel to get to your app is longer, it’s actually an opportunity. Let’s dive into why and how you should be running web-to-app acquisition campaigns.3 benefits of web-to-app campaignsWeb acquisition campaigns became tried-and-true for a reason and many apps are beginning to take advantage of the strategy to reduce costs, get better visibility, and expand their reach.Reduce costsWhile the cost of app acquisition campaigns is increasing as the space becomes more saturated, web campaigns have been underutilized in recent years. This means many advertisers are finding that the cost of web campaigns are less than app store acquisitions. Much of these higher costs comes from high app store fees - Apple takes a 30% cut from large developers and a 15% cut from smaller developers. The web remains a relatively low-cost, accessible channel.Get better visibilityWith the ability to direct users to your owned mobile site before they click to download your app, you get better visibility into new users and where they came from - the app store is a black box where it’s nearly impossible to match the user who clicked an ad to the user who downloaded your app. On top of that, longer funnels give you more control and insight into each step users take to get to your app - allowing you to better optimize your campaigns. For example, you can try out different web landing pages to find the most effective way to increase users’ understanding of your app before they download it. This increases your likelihood of, first, motivating users to download your app, and second, encouraging them to stick around.Expand your reachInternet users worldwide spent 415.5 minutes a day online in 2021 according to Oberlo. App users spend at most 300 mins a day in apps according to TechCrunch. The internet is still more prevalent than apps because, let’s face it, the web predates the app store. Even more so, users have become especially savvy on the web, visiting the search bar to research a brand, fact check a friend, or dive deeper into a news headline. This means that by running web campaigns, you’re reaching a massive audience - nearly the entire world population.Andre Kempe, Founder and CEO of Admiral Media says, “marketers consider web acquisition important because they’re reaching a different type of audience that may convert to becoming an active app user, even though they were surfing on a news website… When you start advertising for the web, you reach an audience you haven’t reached before. This is definitely a growth opportunity." Listen to the full podcast.Web campaigns are a tried and true strategy, which is what makes them so effective in today’s ecosystem. Realizing that you should be considering this acquisition channel, let’s discuss how web onboarding can help you maximize success.Maximize success with web onboardingTypically, users complete onboarding directly on your app. Web onboarding, however, means letting users register, subscribe, and sometimes pay on the web, before heading to your app. This way, users are fully prepared to start using your app before even clicking download, ensuring they can engage at full capacity as soon as download is complete.When users onboard through the app, they may not immediately decide to engage but at least the app is still on their phones reminding them everyday of its value - they’re likely to open it again at some point in time. When a user onboards on the web and decides your app isn’t valuable, they’ll never end up actually downloading it - it’s gone and forgotten before it even started. That said, with web onboarding, the users who end up downloading your app will do so with high-intent to actively engage. Plus, you don’t have to pay for users that download without ever engaging. Whatever category your app is - fitness, food delivery, dating, reading, learning, etc. - you can use the web touchpoint to drive quality users to your app.Ensure the transition is seamlessFirst, ensure the web experience mimics the app experience enough that users don’t feel jipped when they actually start using your app. The transition from the web to the app should be seamless. If you’re offering users a taste of your app, the web touchpoint should look exactly like your app or, at least, include all of the same features. If the buttons to adjust settings are on the right side of the page during onboarding, they should be on the right side in the app as well. To ensure users stick around, you have to give them what they signed up for.Give users a sneak peakYou should also determine your main selling point and give users a sneak peak. For example, if you’re a reading app that allows users to adjust the settings of the page, you could give users premium access to the first chapter of a book allowing them to adjust font size or brightness. Readers will not want to leave the experience behind, encouraging them to set up their subscription and input their credit card information on the web before heading to the app to continue reading the book. The best part - when they open your app for the first time they’ll be able to jump right into the app experience.Learn more about how to improve your app’s onboarding experienceWeb-to-app campaigns should not be ignored in this competitive landscape - lower costs, more visibility, better optimization, and strong reach. Going even further to onboard users through the web, you’re improving the quality of the users entering your app for the first time.