314 articles · page 6 of 7
KnowBe4, Thursday, August 21st, 2025
Phishing attacks impersonating HR are on the rise. Between January 1 - March 31, 2025, our Threat Lab team observed a 120% surge in these attacks reported via our PhishER product versus the previous three months. These attacks have remained at elevated levels since peaking in February.
more →
KnowBe4, Wednesday, August 20th, 2025
We all trust HR - or at least we do when we think they're emailing us! Data from KnowBe4's HRM+ platform reveals that phishing simulations with internal subject lines dominate the list of most-clicked templates in 2025.
more → KnowBe4, Tuesday, August 19th, 2025
AI is getting eerily good at mimicking Iron Man's Jarvis: these so-called "OS agents" can now watch your screen, click buttons, fill out forms and manage apps on your computer or phone-all on their own.
more → KnowBe4, Friday, August 15th, 2025
The Better Business Bureau (BBB) has warned that scammers are targeting high-profile employees and influencers with fake invitations to appear as a guest on popular celebrity podcasts.
more → KnowBe4, Thursday, August 7th, 2025
The FBI has issued an advisory warning that scammers are distributing QR code phishing (quishing) links via unsolicited packages sent by snail mail.
more → KnowBe4, Thursday, August 7th, 2025
I hear about a ton of similar-sounding scam calls, where the scammer is pretending to be from a service you use (or used), offering you a substantial monthly discount (30% or more) if you pay some fee ahead of time.
more → KnowBe4, Wednesday, August 6th, 2025
Cybersecurity incidents nearly tripled in the first half of 2025, jumping from 6% in the second half of 2024 to 17% in 2025, according to a new report from LevelBlue.
more → KnowBe4, Wednesday, August 6th, 2025
In today's world, cyberattacks are a constant threat. While technical defenses are crucial, people often remain the easiest attack vector for cybercriminals.
more → KnowBe4, Tuesday, August 5th, 2025
A phishing campaign is targeting Instagram users with phony notifications about failed login attempts, according to researchers at Malwarebytes. Notably, the emails contain "mailto" links rather than traditional URLs, which help the phishing messages avoid being flagged by security filters.
more → KnowBe4, Tuesday, August 5th, 2025
ClickFix attacks have been around for decades; only the name is new. ClickFix attacks use social engineering to trick users into clicking on buttons and links that the user is told are needed so their browser or computer can perform some desired action.
more → KnowBe4, Monday, August 4th, 2025
There is no other way to say it clearer, social engineering is going to be a lot, lot worse soon and far more successful than it is today. And that's saying a lot. It's already pretty bad.
more → KnowBe4, Monday, August 4th, 2025
Attackers are using Microsoft Teams calls to trick users into installing the Matanbuchus malware loader, which frequently precedes ransomware deployment, according to researchers at Morphisec.
more → KnowBe4, Thursday, July 31st, 2025
Most Microsoft 365 users aren't aware of this recently growing serious email threat vector.
more → KnowBe4, Wednesday, July 30th, 2025
A global retail and wholesale company transformed their security posture after implementing KnowBe4's Phish Alert Button (PAB) and security awareness training, achieving an astonishing 50-fold increase in user reporting of phishing attacks.
more → KnowBe4, Tuesday, July 29th, 2025
I've been following ransomware since the first one, the AIDS Cop Trojan, was released in December 1989. It locked up victim computers and asked for $300 to be sent to a Panama P.O. Box. A lot has changed since then.
more → KnowBe4, Tuesday, July 29th, 2025
Managing the security gap between your technical defenses and user behavior just got easier!
more → KnowBe4, Sunday, July 27th, 2025
Bob Fabien wrote on X: "While some are still paying over a grand for AI courses, the biggest players are giving away high-value resources at no cost. From prompt engineering to agent frameworks, it is all here."
more → KnowBe4, Friday, July 25th, 2025
Ransomware attacks increased by 63% year-over-year in the second quarter of 2025, with a total of 276 publicly disclosed incidents, according to a new report from BlackFog.
more → KnowBe4, Friday, July 25th, 2025
Africa's cybersecurity landscape presents a paradox: a widespread belief in preparedness among organisations, although significant blind spots continue to exist, particularly concerning their human layer - their employees.
more → KnowBe4, Tuesday, July 22nd, 2025
I've been following ransomware since the first one, the AIDS Cop Trojan, was released in December 1989. It locked up victim computers and asked for $300 to be sent to a Panama P.O. Box. A lot has changed since then.
more → KnowBe4, Tuesday, July 22nd, 2025
We've seen AI generate art, write code and even compose music. But now it's crafting a new kind of scam: fake travel destinations.
more → KnowBe4, Monday, July 21st, 2025
More than one in ten people who were targeted by job scams this year fell victim, according to a report from Resume.org. Younger people, particularly young men, are more likely to fall victim.
more → KnowBe4, Friday, July 18th, 2025
The US Federal Trade Commission (FTC) has issued an advisory warning of job scams that impersonate well-known companies with tempting employment opportunities.
more → KnowBe4, Wednesday, July 16th, 2025
KnowBe4, providers of a cybersecurity platform that comprehensively addresses human risk management, has launched KnowBe4 Prevent, an email security product to manage outbound email risk.
more → KnowBe4, Wednesday, July 16th, 2025
Getting through secure email gateways (SEGs) is simply the cost of doing business for a cybercriminal. Literally, detection at the perimeter by a SEG is the same as falling at the first hurdle.
more → KnowBe4, Wednesday, July 16th, 2025
Digital connectivity is reshaping European manufacturing, driving both efficiency and innovation. However, this shift has also created a complex and vulnerable cyber threat landscape, making manufacturing the most targeted industry for cyberattacks for the past four years.
more → KnowBe4, Tuesday, July 15th, 2025
Probably not. So the question becomes: "Should your security team learn prompt engineering?" The answer is definitely YES. Here's why:
more → KnowBe4, July 10,2025
Research shows Europe's manufacturing digitalisation has made it a prime target for ransomware and social engineering attacks, as cyberattacks on the sector increase
more → KnowBe4, July 9,2025
As organizations transition back to in-person work environments, KnowBe4 highlights key measures to protect sensitive data and mitigate cyber risks
more → KnowBe4, July 2,2025
Amidst rising ransomware-related attacks, KnowBe4 shares five pivotal tips to reduce human risk this Ransomware Awareness Month
more → KnowBe4, July 1,2025
In today's threat landscape, your employees represent both your greatest vulnerability and your strongest defense. But here's the question: What metrics demonstrate your security awareness efforts are actually building a culture that protects your organization?
more → KnowBe4, July 1,2025
[My Clicking Time Bomb] What Do I Do About the Repeat Clickers?
more → KnowBe4, June 24,2025
Microsoft & KnowBe4 Collab: Strengthen Email Security Through Strategic Integration
more → KnowBe4, June 24,2025
I recently had several conversations about repeat clickers. First with a Forrester analyst and then, shortly after, at KB4-CON Orlando following a presentation on the subject by Matthew Canham, Executive Director of the Cognitive Security Institute.
more → KnowBe4, Wednesday, June 18th, 2025
AI-generated voice deepfakes present an urgent threat to organizations, according to researchers at Pindrop.
more → KnowBe4, Wednesday, June 18th, 2025
Researchers at Google's Mandiant have published a report on voice phishing (vishing) attacks, noting that these attacks have served as initial access points for recent waves of ransomware incidents.
more → KnowBe4, Wednesday, June 18th, 2025
Researchers at Google have published a report on the latest scam trends, noting an increase in travel-themed scams targeting people preparing for their summer vacations.
more → KnowBe4, Wednesday, June 18th, 2025
"The most dangerous attackers aren't the ones trying to break security - they're the ones becoming security."
more → KnowBe4, Friday, June 13th, 2025
There are many things in our lives we must prepare for to be ready. For other things, we wing it, or we're not prepared to deal with it at the moment.
more → KnowBe4, Thursday, June 12th, 2025
Researchers at Socure warn of an ongoing wave of employment fraud driven by North Korean IT operatives attempting to secure positions at foreign companies.
more → KnowBe4, Thursday, June 12th, 2025
Picture this: it's 2021. You're an IT professional, scrolling through LinkedIn, when a message pings. "Bastion Secure," a new cybersecurity company, is hiring. The pay? Excellent.
more → KnowBe4, Wednesday, June 11th, 2025
OpenAI has published a report looking at AI-enabled malicious activity, noting that threat actors are increasingly using AI tools to assist in social engineering attacks and influence operations.
more → KnowBe4, Wednesday, June 11th, 2025
Reducing human risk in cybersecurity requires a human-first approach that relies on effective training and practice for people to gain security knowledge, practice secure behavior, and foster a culture of security and mutual support.
more → KnowBe4, Tuesday, June 10th, 2025
Last year, KnowBe4's report "Exponential Growth in Cyber Attacks Against Higher Education Institutions" illustrated the growing cyber threats facing universities and colleges.
more → KnowBe4, Monday, June 9th, 2025
A criminal threat actor tracked as 'UNC6040' is using voice phishing (vishing) attacks to compromise organizations' Salesforce instances, according to researchers at Google's Threat Intelligence Group
more → KnowBe4, Monday, June 9th, 2025
Researchers at Trellix warn of a spear-phishing campaign that's targeting CFOs around the world with phony employment offers. The emails are designed to deliver a legitimate remote access tool that will give the attacker a foothold on the victim's machine.
more → KnowBe4, Friday, June 6th, 2025
When it comes to cybersecurity, organizations face an ever-present and often underestimated threat: human risk.
more → KnowBe4, Friday, June 6th, 2025
A KnowBe4 co-worker of mine recently got this SMS phishing message (i.e., smish). They quickly identified it as a social engineering attack and shared it on our internal communication channel for sharing such things.
more → iTWire, Thursday, June 5th, 2025
KnowBe4, the world-renowned cybersecurity platform that comprehensively addresses human risk management, released practical cybersecurity guidelines to help individuals and organisations avoid falling victim to environmentally-themed cyber scams on World Environment Day this June.
more →
KnowBe4, Wednesday, June 4th, 2025
KnowBe4 has issued practical advice to help individuals and organisations avoid cyber scams related to environmental campaigns on World Environment Day.
more →