Misconfigurations in Microsoft Exchange open new doors to email spoofing attacks — here’s how it works
If Server A is not listed in the SPF records, lacks a valid DKIM signature ... to restrict incoming emails to trusted sources ...