232 articles · page 2 of 5
KnowBe4, Monday, March 30th, 2026
Researchers at Malwarebytes warn that cybercriminals are peddling stolen tax documents for as low as $4 per identity, with freshly stolen forms selling for $20 each.
more →
KnowBe4, March 27,2026
Although artificial intelligence (AI) seems relatively new to a lot of people, it was first officially created in 1956 and has been a large, improving branch of computer science ever since.
more → KnowBe4, March 27,2026
A finance employee receives an email that appears to come from the CFO requesting urgent payment approval. The message references a current project, uses the correct tone, and arrives at a plausible time. However, the email wasn't written by a colleague - it was generated by AI. And it contains a malicious link.
more → KnowBe4, March 27,2026
Researchers at LayerX warn that custom fonts can fool AI web assistants into thinking phishing pages are benign, while the human user sees something completely different.
more → KnowBe4, March 26,2026
In the financial services industry, a "security incident" is rarely just an IT ticket. It is a regulatory event. Whether you are a bank, a global investment firm, or a fintech startup, your email environment is the most targeted entry point for attackers and the most common exit point for sensitive data.
more → KnowBe4, March 26,2026
Malwarebytes warns that a phishing campaign is using Google Calendar invites to send phony renewal notices for Malwarebytes subscriptions. The calendar invites contain a phone number that will connect the user with a scammer.
more → KnowBe4, March 26,2026
Researchers at Permiso warn that threat actors can plant phishing messages within Copilot AI summaries. Notably, the researchers found that attackers can trick Copilot into including internal information to craft a more targeted message.
more → KnowBe4, March 26,2026
I just came across the Zero Day Clock, and I love it. Everyone should go there, see the stats, see the trends, and figure out what that means for your ongoing and future patch management plans.
more → KnowBe4, March 25,2026
AI isn't just another technology wave-it's a force multiplier for both innovation and risk.
more → Security Boulevard, March 24,2026
KnowBe4 is leaning hard into autonomous AI at RSAC 2026, using the conference to spotlight an expanding suite of AI agents it says is reducing security administration from hours to seconds.
more →
KnowBe4, March 24,2026
I need to confess something. A few days ago whilst vibe coding at 2am (which can end up burning through tokens like they are going out of fashion) I accidentally pasted my API key directly into a Claude chat instead of the terminal window I had open.
more → KnowBe4, March 24,2026
Sending an unsecured email can be likened to writing sensitive information on a sticky note and leaving it on someone else's desk: anybody can intercept and share that information. Fortunately, there are ways to ensure your emails are safe from the prying eyes of hackers through encryption, meaning your message (no matter how sensitive) is seen only by the intended recipient.
more → KnowBe4, March 24,2026
On March 9th, Codewall.ai disclosed how it had hacked McKinsey & Company's AI platform called Lilli, a purpose-built system for 43,000+ employees to analyze documents, chat, and access decades of proprietary research.
more → KnowBe4, March 24,2026
The number of publicly reported unique vulnerabilities has risen year after year. There was a brief decrease and stabilization in 2015 - 2016, but those are the only years in the over two decades (1999 - on) I have been following vulnerability metrics. Other than that, it has been up, up, up.
more → KnowBe4, March 23,2026
The old rules for spotting a phishing email are changing. Remember looking for bad grammar and clumsy spelling? Thanks to AI, hackers' emails are increasingly polished and hard to spot.
more → KnowBe4, Friday, March 20th, 2026
Digital Cleanup Day might be seen as a digital chore: delete old files, clear the inbox, reduce your carbon footprint. It's framed as a technical exercise. But digital cleanup isn't only about your hard drive; it's also about your mind.
more → KnowBe4, Tuesday, March 17th, 2026
Integrated cloud email security (ICES) is a term coined by industry analyst, Gartner, in their 2021 Market Guide for Email Security.
more → KnowBe4, Tuesday, March 17th, 2026
More than 90% of successful cyberattacks start with email, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). That's not because security teams lack tools, but because attackers target human decision-making.
more → KnowBe4, Monday, March 16th, 2026
Our Threat Intelligence team has observed an emerging obfuscation technique, specifically used to make Natural Language Processing (NLP) detection capabilities less effective.
more → KnowBe4, Sunday, March 15th, 2026
Sending an unsecured email can be likened to writing sensitive information on a sticky note and leaving it on someone else's desk: anybody can intercept and share that information. Fortunately, there are ways to ensure your emails are safe from the prying eyes of hackers through encryption, meaning your message - no matter how sensitive - is seen only by the intended recipient.
more → KnowBe4, Saturday, March 14th, 2026
When we think about misdirected email, we often put ourselves in the shoes of the sender. After all, nobody wants to tell their manager that they might (however accidentally) be responsible for a data breach. But what you do when you're on the other side of the inbox?
more → KnowBe4, Friday, March 13th, 2026
- What is Email Data Loss Prevention (DLP)? - Traditionally, email data loss prevention software has used static rules to stop users from emailing sensitive or confidential data. Specifically, email DLP protects organizations from accidentally exposing sensitive data such as bank account numbers, passwords, credit card numbers, intellectual property, or trade secrets.
more → KnowBe4, Thursday, March 12th, 2026
The US Federal Bureau of Investigation (FBI) has issued an advisory warning of a phishing campaign that's impersonating city and county officials to send phony requests for permit fees.
more → KnowBe4, Wednesday, March 11th, 2026
The number of ransomware attacks increased by 50% in 2025, even though the number of victims who decided to pay the ransom fell to an all-time low, according to a new report from Chainalysis.
more → KnowBe4, Tuesday, March 10th, 2026
Our increasing dependence on the internet and specifically email for business and personal communication has produced the perfect environment for cybercriminals to launch phishing attacks.
more → KnowBe4, Tuesday, March 10th, 2026
Security awareness programs are built on measurement. Before you can reduce human risk, you need a clear understanding of where knowledge gaps exist across your workforce. For many organizations, that process starts with a baseline assessment.
more → KnowBe4, Tuesday, March 10th, 2026
Yes, you need AI to defeat AI. Long-time followers of mine know that I am not an AI hype person. Some people might even call me an AI critic. I prefer to call myself an AI realist.
more → KnowBe4, Monday, March 9th, 2026
As I wrote in my recent book, How AI and Quantum Impacts Cyber Threats and Defenses, as we humans use AI more and more, AI will begin to communicate with itself using new AI-only communication methods that humans cannot easily see or read.
more → KnowBe4, Monday, March 9th, 2026
More than 90% of successful cyberattacks start with email, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). That's not because security teams lack tools, but because attackers target human decision-making.
more → KnowBe4, Saturday, March 7th, 2026
OSINT stands for open-source intelligence. It is the collection, analysis, and dissemination of information from publicly available sources, such as social media, government reports, newspapers, and other public documents.
more → KnowBe4, Friday, March 6th, 2026
Email attacks have become one of the key ways for hackers to target organizations and individuals. The sheer number of tools available has made it easier than ever for non-technical cybercriminals to launch sophisticated cyber attacks. As a result, many resources are available for each stage of the kill chain - from reconnaissance to delivery to weaponization.
more → KnowBe4, Friday, March 6th, 2026
Fake calendar invites have been a problem on Gmail for years. Even though they could appear on other calendar services, I hadn't seen or read about a lot of it. Gmail had been taking the brunt of the fake calendar invites.
more → KnowBe4, Friday, March 6th, 2026
Most data breaches don't happen because systems fail. They happen because people make routine errors.
more → KnowBe4, Thursday, March 5th, 2026
Messaging platforms are now a major vector for phishing and other social engineering attacks, according to a new report from NCC Group's Fox-IT.
more → KnowBe4, Thursday, March 5th, 2026
Email-based threats are evolving faster than traditional solutions can keep up. According to Verizon's 2025 Data Breach Investigations Report, the use of synthetically generated text in malicious emails has doubled over the past two years.
more → KnowBe4, Thursday, March 5th, 2026
Spear phishing is on the rise in the US and is quickly becoming the biggest cybersecurity threat for businesses. With more sophisticated, human-like emails and a greater reliance on email communication in general, it can be difficult to spot a standard phishing attack, let alone a spear phishing one.
more → KnowBe4, Wednesday, March 4th, 2026
Phishing isn't just increasing. It's outpacing the way many organizations test for it. Attacks have surged 400% year over year, and corporate users are now more likely to be targeted by phishing than by malware.
more → KnowBe4, Wednesday, March 4th, 2026
Our increasing dependence on the internet and, specifically, email for business and personal communication has produced the perfect environment for cybercriminals to launch phishing attacks.
more → KnowBe4, Tuesday, March 3rd, 2026
Sending a work email to the wrong person - it's something all of us have done at least once in our working lives. For some people, it's a regular occurrence. But just how risky is it?
more → KnowBe4, Tuesday, March 3rd, 2026
Threat actors are using phony meeting invites for Zoom, Microsoft Teams, Google Meet and other video conferencing applications to trick users into installing remote monitoring and management (RMM) tools, according to researchers at Netskope.
more → KnowBe4, Friday, February 27th, 2026
By the end of 2026, over 90% of all credential compromise attacks are estimated to be enabled by modular Phishing-as-a-Service (PhaaS) kits like the sophisticated, global threat, Kratos.
more → KnowBe4, Tuesday, February 24th, 2026
Social engineering remains the most reliable way into an organization-and attackers are getting better at it every day.
more → KnowBe4, Tuesday, February 24th, 2026
Threat actors are using phony meeting invites for Zoom, Microsoft Teams, Google Meet, and other video conferencing applications to trick users into installing remote monitoring and management (RMM) tools, according to researchers at Netskope.
more → KnowBe4, Tuesday, February 24th, 2026
Do Passwords Need to Be 25+ Characters Due to AI and Quantum Attacks?
more → KnowBe4, Sunday, February 22nd, 2026
Cybercriminals continually evolve their techniques, leading to more successful phishing attacks. Using techniques such as text-based attacks that utilize social engineering and highly targeted spear phishing, bad actors are able to bypass traditional email security and land in their target's inbox.
more → KnowBe4, Friday, February 20th, 2026
There's a beautiful moment happening right now, and by "beautiful" I mean "horrifying in that can't-look-away-from-the-car-crash sense'.
more → KnowBe4, Thursday, February 19th, 2026
Social engineering remained the top initial access vector for cyberattacks in 2025, with increasing assistance from AI tools, according to a report from ThreatDown. The researchers warn that AI will likely become a core component of social engineering attacks throughout 2026.
more → KnowBe4, Wednesday, February 18th, 2026
Prior to my further research into AI and quantum for my latest book, How AI and Quantum Impact Cyber Threats and Defenses, I had pretty solid password policy recommendations:
more → KnowBe4, Tuesday, February 17th, 2026
There's a moment in every security professional's career when they realise the game has fundamentally changed. Mine came last Tuesday at 3:47 PM, watching my colleague Erich argue with an AI agent about expense policy while simultaneously being phished by what I'm 87% certain was another AI agent pretending to be from IT.
more → KnowBe4, Tuesday, February 17th, 2026
Cybercriminals are abusing legitimate invoices and dispute notifications from popular services to send scam emails that bypass security filters, according to researchers at Kaseya's INKY. The attackers have used this technique to impersonate PayPal, Apple, DocuSign, HelloSign, and others.
more →