KnowBe4, Friday, April 3rd, 2026
Outbound Email Security: Protecting Data And Reputation
Email security often focuses on incoming threats such as phishing, malware, and malicious links, but outbound email security is just as important.
more →
Back Issues/Search Home → Archive → Popular →
All sections ›
Archive
KnowBe4 — Archive
286 articles · page 3 of 6
KnowBe4, Thursday, April 2nd, 2026
How To Prevent Phishing Emails By Reducing Human Risk
Organizations have traditionally treated phishing emails as a technology problem to be solved with spam filters and secure email gateways.
more → KnowBe4, Tuesday, March 31st, 2026
The New Playground For Cybercriminals: Securing The Microsoft Teams Frontier
With 320 million daily users on Microsoft Teams, the ability to connect with colleagues across the organization has never been more seamless - or more targeted.
more → KnowBe4, Tuesday, March 31st, 2026
CyberheistNews Vol 16 #13 The 'Urgency Trap': Why Time Pressure Is Your Biggest Email Red Flag
The 'Urgency Trap': Why Time Pressure is Your Biggest Email Red Flag
more → KnowBe4, Monday, March 30th, 2026
Criminals Are Selling Stolen Tax Forms For Cheap On The Dark Web
Researchers at Malwarebytes warn that cybercriminals are peddling stolen tax documents for as low as $4 per identity, with freshly stolen forms selling for $20 each.
more → KnowBe4, March 27,2026
Introducing Our Knowbe4 AI Agents
Although artificial intelligence (AI) seems relatively new to a lot of people, it was first officially created in 1956 and has been a large, improving branch of computer science ever since.
more → KnowBe4, March 27,2026
How Adaptive Email Security Helps Navigate Threats In The Age Of AI
A finance employee receives an email that appears to come from the CFO requesting urgent payment approval. The message references a current project, uses the correct tone, and arrives at a plausible time. However, the email wasn't written by a colleague - it was generated by AI. And it contains a malicious link.
more → KnowBe4, March 27,2026
Custom Fonts Can Trick AI Assistants Into Approving Phishing Sites
Researchers at LayerX warn that custom fonts can fool AI web assistants into thinking phishing pages are benign, while the human user sees something completely different.
more → KnowBe4, March 26,2026
Why Financial Firms Are Outgrowing Traditional Email Security
In the financial services industry, a "security incident" is rarely just an IT ticket. It is a regulatory event. Whether you are a bank, a global investment firm, or a fintech startup, your email environment is the most targeted entry point for attackers and the most common exit point for sensitive data.
more → KnowBe4, March 26,2026
Scammers Abuse Calendar Invites To Plant Phony Subscription Notices
Malwarebytes warns that a phishing campaign is using Google Calendar invites to send phony renewal notices for Malwarebytes subscriptions. The calendar invites contain a phone number that will connect the user with a scammer.
more → KnowBe4, March 26,2026
Report: Attackers Can Trick AI Assistants Into Displaying Phishing Messages
Researchers at Permiso warn that threat actors can plant phishing messages within Copilot AI summaries. Notably, the researchers found that attackers can trick Copilot into including internal information to craft a more targeted message.
more → KnowBe4, March 26,2026
Great Patching Lessons To Learn From The Zero Day Clock
I just came across the Zero Day Clock, and I love it. Everyone should go there, see the stats, see the trends, and figure out what that means for your ongoing and future patch management plans.
more → KnowBe4, March 25,2026
Why Your Human Risk Management Strategy Can't Ignore AI
AI isn't just another technology wave-it's a force multiplier for both innovation and risk.
more → Security Boulevard, March 24,2026
KnowBe4 Expands AIDA to Eight AI Agents at RSAC 2026, Targeting Fully Autonomous Human Risk Management
KnowBe4 is leaning hard into autonomous AI at RSAC 2026, using the conference to spotlight an expanding suite of AI agents it says is reducing security administration from hours to seconds.
more →
KnowBe4, March 24,2026
I Didn't Revoke My API Keys Because Claude Called Me An Idiot
I need to confess something. A few days ago whilst vibe coding at 2am (which can end up burning through tokens like they are going out of fashion) I accidentally pasted my API key directly into a Claude chat instead of the terminal window I had open.
more → KnowBe4, March 24,2026
CyberheistNews Vol 16 #12 [Keep An Eye Out] Why Unsecured Outlook Email Is Risky
Sending an unsecured email can be likened to writing sensitive information on a sticky note and leaving it on someone else's desk: anybody can intercept and share that information. Fortunately, there are ways to ensure your emails are safe from the prying eyes of hackers through encryption, meaning your message (no matter how sensitive) is seen only by the intended recipient.
more → KnowBe4, March 24,2026
Best Practices For Implementing AI Agents
On March 9th, Codewall.ai disclosed how it had hacked McKinsey & Company's AI platform called Lilli, a purpose-built system for 43,000+ employees to analyze documents, chat, and access decades of proprietary research.
more → KnowBe4, March 24,2026
100,000+ New Vulnerabilities This Year And Most Will Be Zero-Days Exploited Faster
The number of publicly reported unique vulnerabilities has risen year after year. There was a brief decrease and stabilization in 2015 - 2016, but those are the only years in the over two decades (1999 - on) I have been following vulnerability metrics. Other than that, it has been up, up, up.
more → KnowBe4, March 23,2026
The 'Urgency Trap': Why Time Pressure Is Your Biggest Email Red Flag
The old rules for spotting a phishing email are changing. Remember looking for bad grammar and clumsy spelling? Thanks to AI, hackers' emails are increasingly polished and hard to spot.
more → KnowBe4, Friday, March 20th, 2026
Digital Cleanup: It's Not Just Your Files, It's Your Brain
Digital Cleanup Day might be seen as a digital chore: delete old files, clear the inbox, reduce your carbon footprint. It's framed as a technical exercise. But digital cleanup isn't only about your hard drive; it's also about your mind.
more → KnowBe4, Tuesday, March 17th, 2026
What Is Integrated Cloud Email Security (ICES) And Why Do You Need It?
Integrated cloud email security (ICES) is a term coined by industry analyst, Gartner, in their 2021 Market Guide for Email Security.
more → KnowBe4, Tuesday, March 17th, 2026
Cyberheistnews Vol 16 #11 9 Must-Know Best Practices For Email Security
More than 90% of successful cyberattacks start with email, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). That's not because security teams lack tools, but because attackers target human decision-making.
more → KnowBe4, Monday, March 16th, 2026
Creating Noise: The Emerging Obfuscation Technique Designed to Evade Email Security NLP Detection Capabilities
Our Threat Intelligence team has observed an emerging obfuscation technique, specifically used to make Natural Language Processing (NLP) detection capabilities less effective.
more → KnowBe4, Sunday, March 15th, 2026
How do I Send a Secure Email in Outlook?
Sending an unsecured email can be likened to writing sensitive information on a sticky note and leaving it on someone else's desk: anybody can intercept and share that information. Fortunately, there are ways to ensure your emails are safe from the prying eyes of hackers through encryption, meaning your message - no matter how sensitive - is seen only by the intended recipient.
more → KnowBe4, Saturday, March 14th, 2026
Received Someone Else's Confidential Email? Here's What To Do.
When we think about misdirected email, we often put ourselves in the shoes of the sender. After all, nobody wants to tell their manager that they might (however accidentally) be responsible for a data breach. But what you do when you're on the other side of the inbox?
more → KnowBe4, Friday, March 13th, 2026
Email DLP: Everything You Need to Know
- What is Email Data Loss Prevention (DLP)? - Traditionally, email data loss prevention software has used static rules to stop users from emailing sensitive or confidential data. Specifically, email DLP protects organizations from accidentally exposing sensitive data such as bank account numbers, passwords, credit card numbers, intellectual property, or trade secrets.
more → KnowBe4, Thursday, March 12th, 2026
FBI: Phishing Attacks Are Impersonating City and County Officials
The US Federal Bureau of Investigation (FBI) has issued an advisory warning of a phishing campaign that's impersonating city and county officials to send phony requests for permit fees.
more → KnowBe4, Wednesday, March 11th, 2026
Ransomware Attacks Surge by 50% Even as Payments Drop
The number of ransomware attacks increased by 50% in 2025, even though the number of victims who decided to pay the ransom fell to an all-time low, according to a new report from Chainalysis.
more → KnowBe4, Tuesday, March 10th, 2026
CyberheistNews Vol 16 #10 How to Spot a Phishing Website Before It Steals Your Data
Our increasing dependence on the internet and specifically email for business and personal communication has produced the perfect environment for cybercriminals to launch phishing attacks.
more → KnowBe4, Tuesday, March 10th, 2026
Announcing the Custom SAPA Agent: Security Awareness Measurement Built for Your Environment
Security awareness programs are built on measurement. Before you can reduce human risk, you need a clear understanding of where knowledge gaps exist across your workforce. For many organizations, that process starts with a baseline assessment.
more → KnowBe4, Tuesday, March 10th, 2026
[Arms Race] Hackers Use AI. Here's Why Defenders Must Too
Yes, you need AI to defeat AI. Long-time followers of mine know that I am not an AI hype person. Some people might even call me an AI critic. I prefer to call myself an AI realist.
more → KnowBe4, Monday, March 9th, 2026
AI-to-AI Communication and Secret AI Code Must Be Stopped At All Costs
As I wrote in my recent book, How AI and Quantum Impacts Cyber Threats and Defenses, as we humans use AI more and more, AI will begin to communicate with itself using new AI-only communication methods that humans cannot easily see or read.
more → KnowBe4, Monday, March 9th, 2026
9 Must-Know Best Practices for Email Security
More than 90% of successful cyberattacks start with email, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). That's not because security teams lack tools, but because attackers target human decision-making.
more → KnowBe4, Saturday, March 7th, 2026
What Is OSINT?
OSINT stands for open-source intelligence. It is the collection, analysis, and dissemination of information from publicly available sources, such as social media, government reports, newspapers, and other public documents.
more → KnowBe4, Friday, March 6th, 2026
What Tools Do Hackers Use To Weaponize Emails?
Email attacks have become one of the key ways for hackers to target organizations and individuals. The sheer number of tools available has made it easier than ever for non-technical cybercriminals to launch sophisticated cyber attacks. As a result, many resources are available for each stage of the kill chain - from reconnaissance to delivery to weaponization.
more → KnowBe4, Friday, March 6th, 2026
Fake Calendar Invitations Move To Microsoft Outlook
Fake calendar invites have been a problem on Gmail for years. Even though they could appear on other calendar services, I hadn't seen or read about a lot of it. Gmail had been taking the brunt of the fake calendar invites.
more → KnowBe4, Friday, March 6th, 2026
Data Loss Prevention (DLP): What It Is, Types, And Solutions
Most data breaches don't happen because systems fail. They happen because people make routine errors.
more → KnowBe4, Thursday, March 5th, 2026
Phishing on Messaging Apps: How Attackers Use WhatsApp, Teams, Slack, and SMS
Messaging platforms are now a major vector for phishing and other social engineering attacks, according to a new report from NCC Group's Fox-IT.
more → KnowBe4, Thursday, March 5th, 2026
Email Security: What It Is, How It Works, And Best Protection Methods
Email-based threats are evolving faster than traditional solutions can keep up. According to Verizon's 2025 Data Breach Investigations Report, the use of synthetically generated text in malicious emails has doubled over the past two years.
more → KnowBe4, Thursday, March 5th, 2026
Spear Phishing Attacks: Top 7 Signs To Watch For
Spear phishing is on the rise in the US and is quickly becoming the biggest cybersecurity threat for businesses. With more sophisticated, human-like emails and a greater reliance on email communication in general, it can be difficult to spot a standard phishing attack, let alone a spear phishing one.
more → KnowBe4, Wednesday, March 4th, 2026
Phishing Simulation: How IT Works To Reduce Risk
Phishing isn't just increasing. It's outpacing the way many organizations test for it. Attacks have surged 400% year over year, and corporate users are now more likely to be targeted by phishing than by malware.
more → KnowBe4, Wednesday, March 4th, 2026
How To Identify A Phishing Website
Our increasing dependence on the internet and, specifically, email for business and personal communication has produced the perfect environment for cybercriminals to launch phishing attacks.
more → KnowBe4, Tuesday, March 3rd, 2026
How Risky Is Sending A Sensitive Work Email To The Wrong Person?
Sending a work email to the wrong person - it's something all of us have done at least once in our working lives. For some people, it's a regular occurrence. But just how risky is it?
more → KnowBe4, Tuesday, March 3rd, 2026
Cyberheistnews Vol 16 #09 Fake Video Meeting Invites Trick Users Into Installing RMM Tools
Threat actors are using phony meeting invites for Zoom, Microsoft Teams, Google Meet and other video conferencing applications to trick users into installing remote monitoring and management (RMM) tools, according to researchers at Netskope.
more → KnowBe4, Friday, February 27th, 2026
The Rise Of Kratos: How The New Phishing-As-A-Service Kit Industrializes Cybercrime
By the end of 2026, over 90% of all credential compromise attacks are estimated to be enabled by modular Phishing-as-a-Service (PhaaS) kits like the sophisticated, global threat, Kratos.
more → KnowBe4, Tuesday, February 24th, 2026
Introducing the AIDA Orchestration Agent: Always-On Human Risk Management Has Arrived
Social engineering remains the most reliable way into an organization-and attackers are getting better at it every day.
more → KnowBe4, Tuesday, February 24th, 2026
Fake Video Meeting Invites Trick Users Into Installing RMM Tools
Threat actors are using phony meeting invites for Zoom, Microsoft Teams, Google Meet, and other video conferencing applications to trick users into installing remote monitoring and management (RMM) tools, according to researchers at Netskope.
more → KnowBe4, Tuesday, February 24th, 2026
CyberheistNews Vol 16 #08 Do Passwords Need to Be 25+ Characters Due to AI and Quantum Attacks?
Do Passwords Need to Be 25+ Characters Due to AI and Quantum Attacks?
more → KnowBe4, Sunday, February 22nd, 2026
Integrated Cloud Email Security (ICES) vs Secure Email Gateway (SEG)
Cybercriminals continually evolve their techniques, leading to more successful phishing attacks. Using techniques such as text-based attacks that utilize social engineering and highly targeted spear phishing, bad actors are able to bypass traditional email security and land in their target's inbox.
more → KnowBe4, Friday, February 20th, 2026
Humans Will Give AI Anything If You Make It Sound Cool Enough
There's a beautiful moment happening right now, and by "beautiful" I mean "horrifying in that can't-look-away-from-the-car-crash sense'.
more →