KnowBe4

Volume 342, Issue 1 · 10 articles from 2 issues

In This Issue

• New Phishing Kit Uses AI to Fully Automate Vishing Attacks
• Bypassing the Gatekeepers: How a Global Phishing Campaign Turns Google's Infrastructure into a Trust Proxy
• Warning: Chameleon SEO Poisoning Spreads Phishing Pages
• Hacking the Healers: New KnowBe4 Whitepaper Highlights Record Security Breaches in Healthcare
• Protecting Every Conversation: Introducing KnowBe4 Defend for Google Workspace
• Recruitment-Themed Phishing Campaign Targets Enterprise Users
• Warning: Malicious AI Tools Are Spreading in the Criminal Underground
• Voice Phishing Attacks Target Hedge Fund Employees
• New Phishing Kit Gives Threat Actors Live View into Attacks
• The .vu Surge: How Threat Actors Are Exploiting Vanuatu's Domain Extension

New Phishing Kit Uses AI to Fully Automate Vishing Attacks (KnowBe4, Wednesday, September 2nd, 2026)

A phishing-as-a-service kit called Balonx chains four commercial AI services to run voice phishing calls end to end. Read more

Bypassing the Gatekeepers: How a Global Phishing Campaign Turns Google's Infrastructure into a Trust Proxy (KnowBe4, Friday, September 4th, 2026)

KnowBe4 Threat Lab details a phishing campaign chaining six Google services to bypass email gateways and firewalls. Read more

Warning: Chameleon SEO Poisoning Spreads Phishing Pages (KnowBe4, Tuesday, September 1st, 2026)

Cloaked SEO poisoning attacks rose 40% in Q2 2026, using disguised search results to push users to phishing sites. Read more

Hacking the Healers: New KnowBe4 Whitepaper Highlights Record Security Breaches in Healthcare (KnowBe4, Wednesday, September 2nd, 2026)

KnowBe4's healthcare whitepaper argues decentralized clinical work and AI agents have dissolved the network perimeter. Read more

Protecting Every Conversation: Introducing KnowBe4 Defend for Google Workspace (KnowBe4, Monday, August 31st, 2026)

KnowBe4 extended its Defend email security product to Google Workspace with multi-engine behavioral AI detection. Read more

Recruitment-Themed Phishing Campaign Targets Enterprise Users (KnowBe4, Wednesday, September 2nd, 2026)

Attackers impersonate real HR staff and use Browser-in-the-Browser popups to steal enterprise credentials from job seekers. Read more

Warning: Malicious AI Tools Are Spreading in the Criminal Underground (KnowBe4, Thursday, August 27th, 2026)

KnowBe4 relays Trellix findings that criminals are selling turnkey AI attack tools such as APEX AI on dark web forums. Read more

Voice Phishing Attacks Target Hedge Fund Employees (KnowBe4, Thursday, August 27th, 2026)

KnowBe4 relays Google GTIG reporting on UNC6671 vishing campaigns against hedge funds to bypass MFA. Read more

New Phishing Kit Gives Threat Actors Live View into Attacks (KnowBe4, Friday, August 28th, 2026)

KnowBe4 covers Cisco Talos research on JWR, a phishing kit that livestreams the victim's session to the attacker. Read more

The .vu Surge: How Threat Actors Are Exploiting Vanuatu's Domain Extension (KnowBe4, Friday, August 28th, 2026)

KnowBe4 Threat Lab reports a 159% surge in phishing exploiting Vanuatu's .vu top-level domain. Read more

More from KnowBe4 · All section posts · This week