KnowBe4 Blog

Quantum Readiness Day: How to Prepare for Post-Quantum Security

Dr. Kawin Boonyapredee — Tue, 22 Sep 2026 13:00:01 GMT

Quantum Readiness Day on September 24 is a useful reminder that the security work we do today is not only about preventing breaches tomorrow. It is about protecting data and digital trust for years to come.

Why Your Security Program Needs a Quantum Upgrade Now

Dr. Kawin Boonyapredee — Tue, 08 Sep 2026 13:00:03 GMT

Quantum Readiness Day on 24 September is a useful reminder that the security work we do today is not only about preventing breaches tomorrow. It is about protecting data and digital trust for years to come.

Securing the Tip of the Spear: Guam’s Path to Human and AI Resilience

Dr. Kawin Boonyapredee — Fri, 21 Aug 2026 08:00:03 GMT

Securing the Tip of the Spear: Guam’s Path to Human and AI Resilience

As the Asia-Pacific and Japan (APJ) region continues its rapid digital acceleration, Guam stands at a unique strategic intersection. Serving as a critical hub for telecommunications, government services and regional defense, the island’s cybersecurity posture is no longer just a local concern, it is a cornerstone of regional stability.

Vietnam’s Cybersecurity Evolution: Classrooms to Digital Resilience

Dr. Kawin Boonyapredee — Wed, 19 Aug 2026 13:00:00 GMT

Navigating the Paradigm Shift in Human Risk Management

Vietnam has emerged as a cornerstone of the global digital economy, but this rapid digitization has come with a significant surge in sophisticated cyber threats. As the country transitions into a more mature technological landscape, the methods used to protect its most critical asset, the workforce, must also evolve. We are witnessing a pivotal move away from traditional, checkbox in-person training toward modern, automated and AI-driven digital resilience.

Shadow AI: The New Frontier of Shadow IT

Dr. Kawin Boonyapredee — Thu, 13 Aug 2026 20:00:02 GMT

As a CISO advisor, I am observing a familiar pattern gaining a new, critical dimension. What we historically identified as "Shadow IT", the use of unapproved SaaS and tools, is rapidly evolving into "Shadow AI."

Employees are increasingly leveraging AI bots for drafting, analysis, code generation and strategic decision-making. While the intention is often to drive efficiency, the lack of governance creates a dangerous risk surface: sensitive data leakage, compliance violations and the potential for operational decisions based on unverified, AI-generated content.

Shadow IT in the Interconnected Web: A CISO Advisor’s View

Dr. Kawin Boonyapredee — Mon, 03 Aug 2026 13:00:06 GMT

On World Wide Web Day (August 1), it’s worth celebrating what the web has made possible. It enabled remote work to function at scale, SaaS platforms to deliver capabilities in days instead of months and instantaneous collaboration through shared docs, chats, whiteboards and task tools that update in real time.

Future-Proofing Organizations in the Face of AI

Dr. Kawin Boonyapredee — Thu, 30 Jul 2026 20:00:04 GMT

Future-proofing organizations in the face of AI requires a unified defense strategy that secures both the human workforce and autonomous AI agents. One of the key requirements is shifting security cultures from reactive compliance to proactive, measurable behavioral change.

The Open-Source Paradox: Navigating the New Frontier of AI Supply Chain Risk

Dr. Kawin Boonyapredee — Fri, 24 Jul 2026 20:00:00 GMT

The recent developments surrounding vulnerabilities in major AI repositories like Hugging Face serve as a critical wake-up call for the cybersecurity community. As we accelerate toward an agentic future, the platforms we rely on for innovation are increasingly becoming the primary vectors for systemic risk.

Trust, Verify, Protect: Modernizing Email Security for the Cloud

Dr. Kawin Boonyapredee — Thu, 16 Jul 2026 13:00:01 GMT

Picture this: Your company just fell victim to a massive data breach. The culprit wasn't a sophisticated malware strain, a zero-day exploit, or a compromised firewall. It was a perfectly legitimate-looking login from a VP’s account, originating from an unrecognized IP address, requesting an urgent wire transfer via a spotless, text-only email.

Cyber Insurance for Mid‑Market Organizations in Southeast Asia

Dr. Kawin Boonyapredee — Wed, 10 Jun 2026 13:00:01 GMT

Overview

Businesses increasingly identify cyber risk as a core operational concern. Yet many cyber incidents still stem from basic, preventable vulnerabilities such as susceptibility to phishing, weak passwords, unpatched software and misconfigured systems. Insurers can play an important role in helping to raise firms’ cybersecurity hygiene and enhancing overall cyber resilience. However, cyber insurance penetration in certain market segments and regions remains low. Estimates suggest only around 10% of small and medium-sized enterprises (SMEs) globally have cyber insurance, and in some countries it could be much lower, especially among the very smallest firms.