KnowBe4, Wednesday, September 16th, 2026
Alert: AI Is Accelerating Targeted Social Engineering Attacks
KnowBe4 reports that generative AI is compressing the time and cost of building highly targeted social engineering attacks.
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Popular →
All sections ›
Archive
KnowBe4 — Archive
297 articles · page 1 of 6
KnowBe4, Tuesday, September 15th, 2026
Phishing Emails Use New Technique to Bypass Microsoft 365 Security Filters
A new evasion technique lets phishing mail slip past Microsoft 365 filtering and reach user inboxes.
more → KnowBe4, Tuesday, September 15th, 2026
CyberheistNews Vol 16 #37: Global Phishing Turns Google into a Trust Proxy
KnowBe4's weekly roundup leads with phishing operations that route through Google services to borrow their trust.
more → KnowBe4, Tuesday, September 15th, 2026
Attackers Use Passkey-Themed Phishing to Breach Cloud Environments
Phishing campaigns exploit passkey enrollment flows to register attacker-controlled authenticators in cloud tenants.
more → KnowBe4, Monday, September 14th, 2026
Warning: Slop Squatting Directs AI Users to Phishing Pages
Attackers register domains matching hallucinated URLs that AI assistants invent, then host phishing pages there.
more → KnowBe4, Monday, September 14th, 2026
Social Engineering Campaign Uses Phony NDAs to Avoid Detection
Attackers send fake non-disclosure agreements as lures because NDA attachments draw less scrutiny from filters and recipients.
more → KnowBe4, Friday, September 11th, 2026
Survey: Companies Cite Phishing as Their Top AI-Enabled Fraud Concern
An Experian survey finds 60 percent of companies reporting higher fraud losses, with AI phishing the leading concern.
more →
KnowBe4, Friday, September 11th, 2026
Phishing Campaign Targets Employees With Malicious SVG Files
SVG images carrying embedded JavaScript have become a rapidly growing phishing delivery method.
more → KnowBe4, Friday, September 11th, 2026
FBI Alert: OAuth Consent Phishing Is Targeting Users of Messaging Apps
The FBI warns of OAuth consent attacks granting account access without ever needing a password.
more → KnowBe4, Thursday, September 10th, 2026
Direct Send: How Attackers Weaponize Your Infrastructure Against You
KnowBe4 Threat Lab examines abuse of Microsoft 365 Direct Send to deliver mail that appears internal.
more → KnowBe4, Thursday, September 10th, 2026
The Workforce Has a Blind Spot, and It's Ringing
As email defenses improve, attackers are moving to the phone, where almost no organization trains or monitors.
more → KnowBe4, Friday, September 4th, 2026
Bypassing the Gatekeepers: How a Global Phishing Campaign Turns Google's Infrastructure into a Trust Proxy
KnowBe4 Threat Lab details a phishing campaign chaining six Google services to bypass email gateways and firewalls.
more →
KnowBe4, Wednesday, September 2nd, 2026
Hacking the Healers: New KnowBe4 Whitepaper Highlights Record Security Breaches in Healthcare
KnowBe4's healthcare whitepaper argues decentralized clinical work and AI agents have dissolved the network perimeter.
more → KnowBe4, Wednesday, September 2nd, 2026
New Phishing Kit Uses AI to Fully Automate Vishing Attacks
A phishing-as-a-service kit called Balonx chains four commercial AI services to run voice phishing calls end to end.
more → KnowBe4, Wednesday, September 2nd, 2026
Recruitment-Themed Phishing Campaign Targets Enterprise Users
Attackers impersonate real HR staff and use Browser-in-the-Browser popups to steal enterprise credentials from job seekers.
more → KnowBe4, Tuesday, September 1st, 2026
Warning: Chameleon SEO Poisoning Spreads Phishing Pages
Cloaked SEO poisoning attacks rose 40% in Q2 2026, using disguised search results to push users to phishing sites.
more → KnowBe4, Monday, August 31st, 2026
Protecting Every Conversation: Introducing KnowBe4 Defend for Google Workspace
KnowBe4 extended its Defend email security product to Google Workspace with multi-engine behavioral AI detection.
more → KnowBe4, Friday, August 28th, 2026
New Phishing Kit Gives Threat Actors Live View into Attacks
KnowBe4 covers Cisco Talos research on JWR, a phishing kit that livestreams the victim's session to the attacker.
more →
KnowBe4, Friday, August 28th, 2026
The .vu Surge: How Threat Actors Are Exploiting Vanuatu's Domain Extension
KnowBe4 Threat Lab reports a 159% surge in phishing exploiting Vanuatu's .vu top-level domain.
more → KnowBe4, Friday, August 28th, 2026
Warning: Replying to a 'Wrong Number' Text Marks You as a Target for Scams
KnowBe4 relays Malwarebytes research showing wrong-number texts are reconnaissance to identify active phone numbers.
more → KnowBe4, Thursday, August 27th, 2026
Warning: Malicious AI Tools Are Spreading in the Criminal Underground
KnowBe4 relays Trellix findings that criminals are selling turnkey AI attack tools such as APEX AI on dark web forums.
more → KnowBe4, Thursday, August 27th, 2026
Voice Phishing Attacks Target Hedge Fund Employees
KnowBe4 relays Google GTIG reporting on UNC6671 vishing campaigns against hedge funds to bypass MFA.
more → KnowBe4, Wednesday, August 26th, 2026
Attackers Use Vishing Attacks to Distribute New Android Malware
KnowBe4 covers Group-IB research on WindRelay Android malware delivered through impersonated bank phone calls.
more → KnowBe4, Tuesday, August 25th, 2026
CyberheistNews Vol 16 #34 Microsoft Observed 7.6 Billion Phishing Emails in Q2 2026
KnowBe4's newsletter leads with Microsoft detecting roughly 7.6 billion phishing emails in Q2 2026.
more → KnowBe4, Tuesday, August 25th, 2026
Report: Phishing Remains the Primary Initial Access Vector
KnowBe4 relays Cisco Talos data showing phishing accounted for over half of attacks observed in Q2 2026.
more → KnowBe4, Monday, August 24th, 2026
Human Error Remains at the Core of AI-Enabled Social Engineering
KnowBe4 relays Resilience data showing AI-enabled social engineering drove 85% of cyber insurance losses in H1 2026.
more → KnowBe4, Monday, August 24th, 2026
Report: AI Chatbots Are More Effective at Building Trust Than Human Scammers
KnowBe4 covers research finding AI chatbots outperform human scammers at building trust in pig-butchering scams.
more → KnowBe4, Friday, August 21st, 2026
Report: Vishing and Device Code Phishing Are Surging
A CrowdStrike report shows vishing doubling and device code phishing rising 15-fold as attackers exploit phone and OAuth flows.
more →
KnowBe4, Friday, August 21st, 2026
Report: Americans Lose an Estimated $148 Billion to Scams Each Year
A Consumer Federation of America report puts annual US online scam losses at $148 billion, over seven times reported figures.
more → KnowBe4, Thursday, August 20th, 2026
The Rise of the Non-Human Insider: When AI Agents Become the Threat
KnowBe4 argues machine identities now outnumber humans 82 to 1, making authenticated AI agents a serious insider risk.
more → KnowBe4, Thursday, August 20th, 2026
Report: One-Quarter of Breaches Are Enabled by AI-Driven Attacks
An IBM-commissioned study finds 25% of malicious breaches are now AI-driven, costing an average $6 million each.
more → KnowBe4, Wednesday, August 19th, 2026
Ransomware Has Changed and Your Defenses Need to Change With It
KnowBe4's Erich Kron argues ransomware is now a business disruption model built on stolen identities and social engineering.
more → KnowBe4, Wednesday, August 19th, 2026
North Korean Hackers Target LinkedIn Users With Fake Job Offers
KnowBe4 reports the North Korean actor Famous Chollima posing as LinkedIn recruiters to push ClickFix malware commands.
more → KnowBe4, Tuesday, August 18th, 2026
Why People Remember Jaws but Forget Your Security Training
KnowBe4 argues engaging, high-production security content drives recall and behavior change where compliance training fails.
more → KnowBe4, Friday, August 14th, 2026
Unmasking the Invisible: How to Identify AI Tools, Hidden Devices, and Other Unknown Assets on Your Network
KnowBe4 sets out how to find unmanaged devices, shadow IT and unauthorised AI tools on enterprise networks.
more →
KnowBe4, Thursday, August 13th, 2026
Shadow AI: The New Frontier of Shadow IT
A KnowBe4 CISO advisor argues shadow IT is evolving into ungoverned shadow AI use.
more → KnowBe4, Wednesday, August 12th, 2026
The Talent Pipeline Nobody Talks About: What Young People Told Us About Cybercrime
KnowBe4 research examines how criminal networks recruit young people and how academies can redirect them.
more → KnowBe4, Wednesday, August 12th, 2026
Why Securing AI Agents Is More Critical Than Ever
KnowBe4 outlines the prompt injection and shadow AI risks introduced by autonomous AI agents.
more → KnowBe4, Wednesday, August 12th, 2026
Report: Employees Are Overconfident in Their Ability to Spot Scams
A Trustmi survey finds employees still rely on typos and other outdated cues to spot AI-crafted phishing.
more → KnowBe4, Tuesday, August 11th, 2026
Why You Can't Arrest Your Way Out of Youth Cybercrime
KnowBe4 reports INTERPOL findings on why arrests alone cannot address youth cybercrime recruitment.
more → KnowBe4, Friday, August 7th, 2026
Your KnowBe4 Fresh Content Updates from July 2026
KnowBe4 summarizes its July 2026 fresh content updates for security awareness programs.
more →
KnowBe4, Thursday, August 6th, 2026
AI Did Not Invent Social Engineering but IT Did Industrialize IT.
KnowBe4 marks National Social Engineering Day arguing AI industrialized rather than invented social engineering.
more → KnowBe4, Tuesday, August 4th, 2026
CyberheistNews Vol 16 #31 the Majority of Orgs Now Hit by Targeted Impersonation Attacks
KnowBe4's CyberheistNews reports 53% of organizations have had an executive or employee impersonated.
more → KnowBe4, Tuesday, August 4th, 2026
Agent Risk Manager Moves into Early Access
KnowBe4 moves Agent Risk Manager into early access for securing AI agents already in production.
more → KnowBe4, Monday, August 3rd, 2026
Shadow IT in the Interconnected Web: A CISO Advisor's View
A KnowBe4 CISO advisor examines shadow IT risk on World Wide Web Day.
more → KnowBe4, Friday, July 31st, 2026
Everyone Is a Builder Now. That Changes Security Training
KnowBe4 argues that when every employee can build software, security training has to change accordingly.
more →
KnowBe4, Friday, July 31st, 2026
Apple Warns Users to Be Wary of Unsolicited FaceTime Calls
Apple flags a wave of scam FaceTime calls impersonating Apple Support to extract payment and banking details.
more → KnowBe4, Friday, July 31st, 2026
New Phishing Kits Use Open-Source Tools to Bypass MFA
Researchers track three phishing kits built on the open-source Evilginx framework to proxy live Microsoft 365 sessions.
more → CIO Influence, Thursday, July 30th, 2026
KnowBe4 Combats Voice-Based Threats With Advanced Simulated Vishing Capabilities
KnowBe4 launches simulated vishing training to address the surge in voice-based social engineering.
more →
KnowBe4, Thursday, July 30th, 2026
Future-Proofing Organizations in the Face of AI
KnowBe4 argues securing AI requires one strategy covering both the human workforce and autonomous agents.
more →