213 articles · page 3 of 5
KnowBe4, Thursday, January 15th, 2026
Attackers are increasingly abusing network misconfigurations to send spoofed phishing emails, according to researchers at Microsoft. This technique isn't new, but Microsoft has observed a surge in these attacks since May 2025.
more →
KnowBe4, Wednesday, January 14th, 2026
Researchers at RavenMail warn that a major phishing campaign targeted more than 3,000 organizations last month, primarily in the manufacturing industry.
more → KnowBe4, Tuesday, January 13th, 2026
When You Can't Believe Your Eyes: AI and the New Misinformation Playbook
more → KnowBe4, Thursday, January 8th, 2026
Email has been the backbone of business communication for decades and as such, it remains the attacker's favorite doorway into an organization.
more → KnowBe4, Wednesday, December 31st, 2025
Find Out What Happens When You Call a Cybercriminal
more → KnowBe4, Tuesday, December 30th, 2025
Researchers at Push Security have observed a new variant of the ClickFix attack that combines 'OAuth consent phishing with a ClickFix-style user prompt that leads to account compromise.'
more → KnowBe4, Friday, December 19th, 2025
A popular phone call/voicemail scam (i.e., vishing) involves someone calling you, claiming to be law enforcement with a warrant for your arrest, and then offers you an opportunity to avoid arrest by paying the 'fine.'
more → KnowBe4, Thursday, December 18th, 2025
Today, anyone can find a picture of absolutely anybody and it is also not difficult to find a sample of their voice. By combining these it is shockingly easy to create a realistic AI deepfake video of that person.
more → KnowBe4, December 10,2025
State of Human Risk 2025 Report Shows Increase in Both Human-Related Security Incidents and AI Application Breaches
more →
KnowBe4, December 10,2025
Researchers at SpyCloud have observed a 400% year-over-year increase in successful phishing attacks, with a disproportionate number of attacks targeting corporate accounts
more → KnowBe4, Thursday, December 4th, 2025
KnowBe4, the platform that comprehensively addresses AI and human risk management, has been recognised as a Leader in the 2025 Gartner Magic Quadrant for Email Security Platforms for the second consecutive year and acknowledged specifically for its Ability to Execute and Completeness of Vision.
more →
KnowBe4, Friday, November 28th, 2025
A large phishing campaign is using phony seasonal party invites to trick users into installing remote management and monitoring (RMM) tools, according to researchers at Symantec.
more → KnowBe4, Friday, November 28th, 2025
Here's a curious thing about people, sometimes we crave the familiar, and sometimes we demand the novel.
more → KnowBe4, Wednesday, November 26th, 2025
Between 1:48pm ET on October 29 and 6:53pm ET on October 30, 2025, KnowBe4 threat analysts observed a high volume of phishing emails detected by KnowBe4 Defend that were sent from the legitimate domain of one of the world's largest sportswear brands.
more → IT Security Guru, Tuesday, November 18th, 2025
New KnowBe4 Studios leverages the variety of world-class training brands under the KnowBe4 umbrella; Over 100 million learners educated globally
more → KnowBe4, Thursday, November 13th, 2025
Cybereason warns that the Tycoon 2FA phishing kit continues to receive upgrades, allowing unskilled cybercriminals to launch sophisticated social engineering attacks. The platform is known for its ability to bypass multi-factor authentication measures.
more → KnowBe4, Friday, November 7th, 2025
Researchers at Appknox warn that malicious apps are impersonating popular AI tools like ChatGPT and DALL-E to trick users into installing malware on their mobile devices. Some of these apps simply collect user data to be sold to advertising services, while others act as full-fledged malware.
more → KnowBe4, Friday, November 7th, 2025
A phishing campaign is using invisible characters to evade security filters, according to Jan Kopriva at the SANS Internet Storm Center.
more → KnowBe4, Tuesday, October 28th, 2025
Block Attackers Who Abuse Grok to Spread Phishing Links
more → KnowBe4, Monday, October 27th, 2025
This story happened a decade ago, when I was working at a Fortune 10 company. 'Smartest' is subjective, but most of my former coworkers and external customers agreed the guy involved in this story was seen as the 'smartest' guy around.
more → KnowBe4, Thursday, October 23rd, 2025
A phishing campaign is impersonating LastPass and Bitwarden with phony breach notifications, BleepingComputer reports.
more → KnowBe4, Wednesday, October 22nd, 2025
Threat actors are abusing X's generative AI bot Grok to spread phishing links, according to researchers at ESET. The attackers achieve this by tricking Grok into thinking it's answering a question, and providing a link in its answer.
more → KnowBe4, Wednesday, October 22nd, 2025
Cybernews warns that threat actors will likely take advantage of the recent AWS outage to launch phishing attacks against affected users.
more → KnowBe4, Monday, October 20th, 2025
Ransomware is the gift that keeps on giving. and taking. I've been tracking ransomware for almost nine years now, and I've seen it progress from simple and annoying malware to an organization-ending threat for many.
more → KnowBe4, Thursday, October 16th, 2025
Google's Mandiant has published guidance on defending against an ongoing wave of social engineering attacks targeting organizations' Salesforce instances.
more → KnowBe4, Monday, October 13th, 2025
We've come a long way. We've deconstructed the problem, explored the complexity of humans, and laid out a strategic framework and a practical map-all of which can be explored in more detail in our Human Risk Management (HRM) whitepaper.
more → KnowBe4, Monday, October 13th, 2025
Deepfakes are easier to create than ever and are being used to attack organizations, families and individuals.
more → KnowBe4, Friday, October 10th, 2025
The conversation about AI in cybersecurity is missing the point. While the industry has been focused on the emergence of AI-generated phishing emails, perhaps a far more profound shift has been somewhat ignored.
more → KnowBe4, October 1,2025
The calendar has flipped into October, so now it's time to let the Cybersecurity Awareness Month games begin!
more → KnowBe4, September 30,2025
Law firms really are under constant pressure to meet tight deadlines, maintain client confidentiality and protect privileged communications.
more → KnowBe4, Thursday, September 25th, 2025
Researchers at Varonis warn of a new phishing automation platform called "SpamGPT" that 'combines the power of generative AI with a full suite of email campaign tools.'
more → KnowBe4, Thursday, September 25th, 2025
Attackers are abusing AI-powered development platforms like Lovable, Netlify and Vercel to create and host captcha challenge websites as part of phishing campaigns, according to researchers at Trend Micro.
more → KnowBe4, Tuesday, September 23rd, 2025
Protecting humans means protecting the tools humans use.
more → KnowBe4, Tuesday, September 23rd, 2025
Hackread reports that attackers are abusing Google's AppSheet platform to send phishing emails.
more → KnowBe4, September 19,2025
Let's be brutally honest. For years, our industry has been locked in a civil war. In one camp, the technologists have been building higher walls and smarter traps, arguing that the right AI-powered, next-gen firewall will solve all our problems.
more → KnowBe4, September 18,2025
AI-assisted phishing attacks pose a significant and increasing threat to organizations, according to Matt Weidman, partner and vice president of Commercial Property & Casualty at USIA.
more → KnowBe4, September 18,2025
North Korean hackers behind the 'Contagious Interview' campaign are using the ClickFix social engineering tactic to target job seekers with phony employment offers, according to researchers at SentinelOne.
more → KnowBe4, September 16,2025
Shadow AI Threats Are Increasing. Here's How to Spot Them
more → KnowBe4, September 15,2025
Protecting humans means protecting the tools humans use
more → CyberheistNews, Wednesday, September 10th, 2025
One of the biggest enduring mysteries for me in cybersecurity is why most cybersecurity curricula don't teach secure coding to programmers.
more → KnowBe4, Tuesday, September 9th, 2025
KnowBe4's new HRM framework guides organizations to transform employees into an active layer of defense through data-driven insights, cultural understanding and targeted interventions
more → KnowBe4, Thursday, September 4th, 2025
Threat actors can now use AI tools to automate entire attack operations, according to a new report from Anthropic.
more → KnowBe4, Wednesday, September 3rd, 2025
KnowBe4 launches its seventh resource kit for cybersecurity awareness month to empower individuals & organisations to "Secure Our World" with practical tools and training
more →
KnowBe4, Thursday, August 28th, 2025
KnowBe4 launches its seventh resource kit for cybersecurity awareness month to empower individuals & organizations to "Secure Our World" with practical tools and training
more → KnowBe4, Friday, August 22nd, 2025
Cybercriminals are increasingly abusing AI-assisted website generators to quickly craft convincing phishing sites, according to researchers at Palo Alto Networks' Unit 42.
more → KnowBe4, Friday, August 22nd, 2025
Below is an example of a sophisticated survey scam phishing email that KnowBe4's Threat Lab team has been monitoring as discussed in 'The Hidden Cost of "Free" Gifts: How Survey Scams Are Evolving to Steal Financial Data'.
more → KnowBe4, Friday, August 22nd, 2025
You've probably seen them: enticing online offers for free products from brands you trust, like a Yeti beach chair from Costco or an emergency car kit from AAA.
more → KnowBe4, Thursday, August 21st, 2025
Social engineering attacks are a growing threat to operational technology (OT) environments, Industrial Cyber reports.
more → KnowBe4, Thursday, August 21st, 2025
In this series, we first explored the psychology that makes HR phishing so effective, then showcased the real-world lures attackers use to trick your employees. Now, we're going under the hood to answer the critical question: How do these attacks technically bypass security defenses?
more → KnowBe4, Thursday, August 21st, 2025
Phishing attacks impersonating HR are on the rise. Between January 1 - March 31, 2025, our Threat Lab team observed a 120% surge in these attacks reported via our PhishER product versus the previous three months. These attacks have remained at elevated levels since peaking in February.
more →