KnowBe4 Blog

Why People Remember Jaws But Forget Your Security Training

Javvad Malik — Tue, 18 Aug 2026 22:45:01 GMT

“You’re gonna need a bigger boat.”

What Security Can Learn From Dinosaurs

Javvad Malik — Thu, 30 Jul 2026 16:00:04 GMT

In business, calling something a dinosaur is meant to suggest it is slow, outdated and overdue for extinction. Which is unfair to dinosaurs, who enjoyed one of the most successful runs in the history of life.

The New Face of AI Risk

Javvad Malik — Wed, 22 Jul 2026 13:00:00 GMT

Cybercrime used to have a ‘"tell." It was the digital equivalent of a villain stroking their cat - clunky grammar, misspelt links and suspicious attachments that screamed ‘phishing’.

Prompt Injection and the Rise of Agentic Risk

Javvad Malik — Thu, 09 Jul 2026 13:00:02 GMT

Boxers will often say, the punches that hurt the most aren’t the ones which are thrown with the most force, but the ones they didn’t see coming. I think the same is true in cybersecurity. It’s not the most advanced technically efficient, 0-day utilizing attacks that have the biggest impact, but rather those quiet ones. With no malware or suspicious login at three in the morning from an IP address in a country your company has never done business with. No alert fires. No dashboard turns red.

Shadow AI Is Not Shadow IT With a Better Marketing Budget

Javvad Malik — Wed, 01 Jul 2026 13:00:00 GMT

I saw a venn diagram on social media. One circle is Shadow IT, one circle is Shadow AI, a substantial overlap, and the implicit message is that they are effectively the same challenge.

Security Training Needs Google Maps, Not Christopher Columbus

Javvad Malik — Thu, 25 Jun 2026 13:00:03 GMT

If you’re around my age, then you know the joy of using an old paper map. Not real joy, obviously. More the sort of joy normally associated with trying to keep track of 3 pages, getting told off for not holding it the right way up, or for giving instructions too late, and discovering that the road you were confidently following was replaced by a retail park sometime during the Blair years.

Attackers aren’t loyal to any collaboration channel

Javvad Malik — Wed, 24 Jun 2026 13:00:06 GMT

Cloud email security has become pretty good. Not perfect, obviously, because the attack landscape is forever changing. But good enough that the old tactics do not land with the same success rate they once did. Filters are sharper. Detection is better. Users are smarter.

Fighting AI-Assisted Ransomware Threats

Javvad Malik — Thu, 14 May 2026 20:00:01 GMT

This Anti-Ransomware Day, it's important to recognize the ever-changing landscape of cyber threats and how organizations can fortify their defenses. The evolution from traditional ransomware to cyber extortion over the last few years reflects a professionalized, decentralized ecosystem. To arm your organization against this danger, understanding the current landscape and implementing robust defense strategies is essential.

Nobody runs a marathon by accident

Javvad Malik — Wed, 22 Apr 2026 04:00:01 GMT

Nobody wakes up on a Sunday, stretches, checks the weather, and accidentally clocks 26.2 miles before brunch. A marathon is built on lonely mornings, careful plans, lost toenails, and no social life. You train for weeks or months. You get injured. You ice. You tape. You pick protein over pudding. All because you know without this, you won’t cross that finish line.

I Didn’t Revoke my API Keys Because Claude Called Me An Idiot

Javvad Malik — Tue, 24 Mar 2026 17:30:00 GMT

I need to confess something. A few days ago whilst vibe coding at 2am (which can end up burning through tokens like they are going out of fashion) I accidentally pasted my API key directly into a Claude chat instead of the terminal window I had open.