KnowBe4, Friday, October 23rd, 2026
Warning: Attackers Are Using Calendar Invite Files to Evade Security Filters
KnowBe4 warns that phishing campaigns use ICS calendar invites to plant lures on calendars and bypass security filters.
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Services → Vendors → Popular →
All sections ›
Archive
KnowBe4 — Archive
319 articles · page 1 of 7
KnowBe4, Thursday, October 22nd, 2026
Warning: Calendly Phishing Pages Are Targeting Job Seekers
KnowBe4 warns of spoofed Calendly pages posing as Meta job interviews to steal Facebook and Google credentials and MFA codes.
more → KnowBe4, Wednesday, October 21st, 2026
Warning: Phishing Attacks Are Abusing RMM Tools to Target Bank Accounts
KnowBe4 cites Fortra data showing a 475% rise in phishing attacks that use RMM tools to target business banking accounts.
more → KnowBe4, Wednesday, October 21st, 2026
Report: Ransomware Attacks Hit a Record High in Q3 2026
KnowBe4 cites Comparitech data showing a record 2,627 ransomware attacks in Q3 2026, with education up 50%.
more → KnowBe4, Wednesday, October 21st, 2026
AI Data Centers: Environmental Disaster or Groundbreaking Innovation?
KnowBe4's Attempted Intelligence podcast debates the electricity, water, noise and economic impact of AI data centers.
more → KnowBe4, Wednesday, October 14th, 2026
Warning: Phishing Attacks Are Using AI-Themed Ad Lures
Island researchers found a phishing platform posing as AI advertising tools to steal ad-account credentials and MFA codes.
more →
KnowBe4, Tuesday, October 13th, 2026
Report: Ransomware Attacks Involving Data Theft Are Surging
Zscaler data shows ransomware attacks with data theft rose 275% in 2026, with managers the most common victims.
more → KnowBe4, Tuesday, October 13th, 2026
Extortion Groups Are Impersonating Help Desks to Gain Initial Access
ReliaQuest reports a surge in vishing and Teams phishing by extortion groups like ShinyHunters posing as IT help desks.
more → KnowBe4, Monday, October 12th, 2026
Trust, but Verify: Navigating the Era of AI Deepfakes
KnowBe4's Cybersecurity Awareness Month week-two theme focuses on AI safety and spotting deepfakes.
more → KnowBe4, Friday, October 9th, 2026
The Rise of Legitimate-Service Phishing: 1 in 10 Phishing Emails Now Comes From a Platform You Trust
KnowBe4 Threat Lab measures how attackers abuse trusted platforms like DocuSign, SharePoint and Dropbox for phishing.
more →
KnowBe4, Thursday, October 8th, 2026
Two Systems, One Truth: Unifying Training Records Across SAT and LMS
KnowBe4 explains why split SAT and LMS training records can fail as evidence for cyber insurance and compliance.
more → KnowBe4, Wednesday, October 7th, 2026
Warning: Attackers Are Tricking Employees Into Sharing Malicious Calendar Invites
Attackers posing as prospects get employees to forward booking links that lead to Microsoft 365 credential phishing.
more → KnowBe4, Tuesday, October 6th, 2026
CyberheistNews Vol 16 #40 Why Microsoft's Latest Defense-in-Depth Email Benchmark Is So Surprising
KnowBe4's CyberheistNews examines Microsoft's fifth email security benchmarking report and its real-world findings.
more → KnowBe4, Monday, October 5th, 2026
Threat Actors Abuse Trusted Accounts and Internal Tools to Launch Convincing BEC Attacks
Rapid7's Douglas McKee describes 'calendar warfare' and other BEC tactics using compromised trusted accounts.
more → KnowBe4, Monday, October 5th, 2026
Cyber Espionage: When the Attacker's Best Asset Is You
KnowBe4's Erich Kron introduces its spy-themed Cybersecurity Awareness Month kit focused on social engineering.
more → KnowBe4, Tuesday, September 29th, 2026
Report: Social Engineering Attacks Are Increasingly Using Audio and Video Deepfakes
A Gartner survey cited by KnowBe4 finds 41% of CISOs faced an audio deepfake attack and 36% saw deepfake video calls in a year.
more →
KnowBe4, Tuesday, September 29th, 2026
Govern Claude AI with KnowBe4's Agent Risk Manager
KnowBe4's Agent Risk Manager integrates with the Claude Compliance API to monitor Claude activity and detect risks in real time.
more → KnowBe4, Friday, September 25th, 2026
Warning: New Phishing Kit Targets Sales Teams
A new 'GhostCode' phishing kit uses fake sales inquiries and device-code phishing to steal OAuth tokens and bypass MFA, per eSentire.
more →
KnowBe4, Thursday, September 24th, 2026
AI-Generated Phishing Pages Are Impersonating Antivirus Services
Malwarebytes found AI-generated phishing pages impersonating Avast renewal notices to trick victims into calling fake support and installing malware.
more → KnowBe4, Wednesday, September 23rd, 2026
Are Your AI Assistants the Next Attack Surface?
KnowBe4 demonstrated an indirect prompt injection attack that used Gemini in Gmail to exfiltrate a one-time password from an unrelated email.
more → KnowBe4, Tuesday, September 22nd, 2026
Quantum Readiness Day: How to Prepare for Post-Quantum Security
A CISO advisor argues Quantum Readiness Day should push organizations to treat post-quantum migration as an ongoing governance program.
more → KnowBe4, Monday, September 21st, 2026
Millions of Phishing Emails Use ASCII Smuggling to Bypass Security Filters
Microsoft found a massive phishing campaign hiding financial keywords like 'funding' using invisible Unicode tag characters to evade filters.
more → KnowBe4, Wednesday, September 16th, 2026
Alert: AI Is Accelerating Targeted Social Engineering Attacks
KnowBe4 reports that generative AI is compressing the time and cost of building highly targeted social engineering attacks.
more →
KnowBe4, Tuesday, September 15th, 2026
Phishing Emails Use New Technique to Bypass Microsoft 365 Security Filters
A new evasion technique lets phishing mail slip past Microsoft 365 filtering and reach user inboxes.
more → KnowBe4, Tuesday, September 15th, 2026
CyberheistNews Vol 16 #37: Global Phishing Turns Google into a Trust Proxy
KnowBe4's weekly roundup leads with phishing operations that route through Google services to borrow their trust.
more → KnowBe4, Tuesday, September 15th, 2026
Attackers Use Passkey-Themed Phishing to Breach Cloud Environments
Phishing campaigns exploit passkey enrollment flows to register attacker-controlled authenticators in cloud tenants.
more → KnowBe4, Monday, September 14th, 2026
Warning: Slop Squatting Directs AI Users to Phishing Pages
Attackers register domains matching hallucinated URLs that AI assistants invent, then host phishing pages there.
more → KnowBe4, Monday, September 14th, 2026
Social Engineering Campaign Uses Phony NDAs to Avoid Detection
Attackers send fake non-disclosure agreements as lures because NDA attachments draw less scrutiny from filters and recipients.
more → KnowBe4, Friday, September 11th, 2026
Survey: Companies Cite Phishing as Their Top AI-Enabled Fraud Concern
An Experian survey finds 60 percent of companies reporting higher fraud losses, with AI phishing the leading concern.
more →
KnowBe4, Friday, September 11th, 2026
Phishing Campaign Targets Employees With Malicious SVG Files
SVG images carrying embedded JavaScript have become a rapidly growing phishing delivery method.
more → KnowBe4, Friday, September 11th, 2026
FBI Alert: OAuth Consent Phishing Is Targeting Users of Messaging Apps
The FBI warns of OAuth consent attacks granting account access without ever needing a password.
more → KnowBe4, Thursday, September 10th, 2026
Direct Send: How Attackers Weaponize Your Infrastructure Against You
KnowBe4 Threat Lab examines abuse of Microsoft 365 Direct Send to deliver mail that appears internal.
more → KnowBe4, Thursday, September 10th, 2026
The Workforce Has a Blind Spot, and It's Ringing
As email defenses improve, attackers are moving to the phone, where almost no organization trains or monitors.
more → KnowBe4, Friday, September 4th, 2026
Bypassing the Gatekeepers: How a Global Phishing Campaign Turns Google's Infrastructure into a Trust Proxy
KnowBe4 Threat Lab details a phishing campaign chaining six Google services to bypass email gateways and firewalls.
more →
KnowBe4, Wednesday, September 2nd, 2026
Hacking the Healers: New KnowBe4 Whitepaper Highlights Record Security Breaches in Healthcare
KnowBe4's healthcare whitepaper argues decentralized clinical work and AI agents have dissolved the network perimeter.
more → KnowBe4, Wednesday, September 2nd, 2026
New Phishing Kit Uses AI to Fully Automate Vishing Attacks
A phishing-as-a-service kit called Balonx chains four commercial AI services to run voice phishing calls end to end.
more → KnowBe4, Wednesday, September 2nd, 2026
Recruitment-Themed Phishing Campaign Targets Enterprise Users
Attackers impersonate real HR staff and use Browser-in-the-Browser popups to steal enterprise credentials from job seekers.
more → KnowBe4, Tuesday, September 1st, 2026
Warning: Chameleon SEO Poisoning Spreads Phishing Pages
Cloaked SEO poisoning attacks rose 40% in Q2 2026, using disguised search results to push users to phishing sites.
more → KnowBe4, Monday, August 31st, 2026
Protecting Every Conversation: Introducing KnowBe4 Defend for Google Workspace
KnowBe4 extended its Defend email security product to Google Workspace with multi-engine behavioral AI detection.
more → KnowBe4, Friday, August 28th, 2026
New Phishing Kit Gives Threat Actors Live View into Attacks
KnowBe4 covers Cisco Talos research on JWR, a phishing kit that livestreams the victim's session to the attacker.
more →
KnowBe4, Friday, August 28th, 2026
The .vu Surge: How Threat Actors Are Exploiting Vanuatu's Domain Extension
KnowBe4 Threat Lab reports a 159% surge in phishing exploiting Vanuatu's .vu top-level domain.
more → KnowBe4, Friday, August 28th, 2026
Warning: Replying to a 'Wrong Number' Text Marks You as a Target for Scams
KnowBe4 relays Malwarebytes research showing wrong-number texts are reconnaissance to identify active phone numbers.
more → KnowBe4, Thursday, August 27th, 2026
Warning: Malicious AI Tools Are Spreading in the Criminal Underground
KnowBe4 relays Trellix findings that criminals are selling turnkey AI attack tools such as APEX AI on dark web forums.
more → KnowBe4, Thursday, August 27th, 2026
Voice Phishing Attacks Target Hedge Fund Employees
KnowBe4 relays Google GTIG reporting on UNC6671 vishing campaigns against hedge funds to bypass MFA.
more → KnowBe4, Wednesday, August 26th, 2026
Attackers Use Vishing Attacks to Distribute New Android Malware
KnowBe4 covers Group-IB research on WindRelay Android malware delivered through impersonated bank phone calls.
more → KnowBe4, Tuesday, August 25th, 2026
CyberheistNews Vol 16 #34 Microsoft Observed 7.6 Billion Phishing Emails in Q2 2026
KnowBe4's newsletter leads with Microsoft detecting roughly 7.6 billion phishing emails in Q2 2026.
more → KnowBe4, Tuesday, August 25th, 2026
Report: Phishing Remains the Primary Initial Access Vector
KnowBe4 relays Cisco Talos data showing phishing accounted for over half of attacks observed in Q2 2026.
more → KnowBe4, Monday, August 24th, 2026
Human Error Remains at the Core of AI-Enabled Social Engineering
KnowBe4 relays Resilience data showing AI-enabled social engineering drove 85% of cyber insurance losses in H1 2026.
more → KnowBe4, Monday, August 24th, 2026
Report: AI Chatbots Are More Effective at Building Trust Than Human Scammers
KnowBe4 covers research finding AI chatbots outperform human scammers at building trust in pig-butchering scams.
more → KnowBe4, Friday, August 21st, 2026
Report: Vishing and Device Code Phishing Are Surging
A CrowdStrike report shows vishing doubling and device code phishing rising 15-fold as attackers exploit phone and OAuth flows.
more →