Topic starter
14/07/2026 4:25 pm
TL;DR: A luxury retailer’s image-heavy sales workflow was disrupted when a legacy email gateway blocked photos while still missing a supplier-compromise phishing campaign that used PNG lures and Microsoft 365 credential theft, according to Proofpoint. The case shows that blunt filtering and mailbox-era controls can break revenue-critical communication while leaving human-targeted attack paths open.
Editorial analysis by NHI Mgmt Group, based on content published by Proofpoint: “From missed images to missed opportunities: why one luxury retailer switched to Proofpoint”.
Key questions
Q: What fails when email security blocks images that business teams depend on?
A: The failure is operational, not just technical.
Q: Why do supplier-compromise phishing campaigns create such a high trust risk?
A: They use an already trusted sender relationship to bypass suspicion and land in a workflow that feels routine.
Q: What are the signs that an email control strategy is failing?
A: Look for two signals at once: business teams start working around email security by moving to consumer apps, and phishing still reaches users through unusual file types or trusted partner accounts.
Practitioner guidance
- Map image-dependent workflows before changing email controls Inventory where sales, supply chain, billing, and customer service rely on images, because those paths will fail if security policy treats all image traffic as hostile.
- Treat supplier-originated email as high-trust, high-scrutiny traffic Apply enhanced review and phishing detection to messages from third parties whose accounts could be abused to impersonate legitimate workflows.
- Use layered mail inspection instead of blunt file blocking Prefer controls that inspect message content, links, and attachments while preserving business-critical file types rather than stripping PNGs or JPEGs indiscriminately.
Bottom line: Legacy email gateways can break legitimate image-based workflows while still missing phishing that uses trusted suppliers and disguised lures.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
14/07/2026 4:33 pm
Legacy email gateways create a governance mismatch when business communication depends on images. The problem is not simply that older filters miss modern lures. It is that the control assumes image traffic is disposable, while the business depends on it for revenue generation, supply chain coordination, and customer interaction. Security architecture that cannot distinguish between risk-bearing images and operational images will eventually force business users to work around it.
A question worth separating out:
Q: How should teams respond when a phishing lure targets Microsoft 365 credentials?
A: Treat it as an identity exposure event, not only a mail incident. Review affected accounts, active sessions, recent sign-ins, and mailbox rules, then validate whether the lure reached other users through the same trusted path. The goal is to contain account abuse before it spreads into mailbox access, impersonation, or downstream business process disruption.
👉 Read our full editorial: Legacy email gateways fail when business workflows depend on images