Security Awareness Training Blog

Keeping You Informed. Keeping You Aware.
Stay on top of the latest in security including social engineering, ransomware and phishing attacks.

Phishing Kits Hosted on More than Six Thousand Domains

Akamai’s 2019 State of the Internet / Security Report found that 6,035 domains were being used to host 120 different phishing kits, according to BleepingComputer. The phishing kits ...
Continue Reading

[Heads Up] Scam Of The Week: Phishing Attacks Using Better Benefits And Pay Raise Bait

Millions of employees use KnowBe4's Phish Alert Button to report suspect emails, and thousands of organizations share these reports with us. This has become a fascinating threat source, ...
Continue Reading

KnowBe4 Fresh Content & Features Updates - October 2019

Check out the content and feature updates in the KnowBe4 platform for the month of October!
Continue Reading

Webroot Threat Researchers Take a Fresh Look at Phishing Tactics

Most people aren’t aware of how sophisticated phishing email templates and websites have become, according to David Dufour from Webroot. Dufour recently told the CyberWire that criminals ...
Continue Reading

SAVE THE DATE!! KnowBe4 User Conference - April 15-17, 2020

KnowBe4’s third annual KB4-Con user conference will be held at the Gaylord Palms Resort & Convention Center in Orlando, FL. KnowBe4 customers get twofree event passes per ...
Continue Reading

KnowBe4 Achieves FedRAMP Authorization from the US Federal Government

On October 25, 2019, KnowBe4 became the first and only security awareness training and simulated phishing provider to receive FedRAMP authorized status. We are very proud of this ...
Continue Reading

Captain Awareness Has A Halloween Message For You

Think Before You Click!
Continue Reading

It's Benefits Enrollment Season Again...And That Means Prime Phishing Season!

By Eric Howes, KnowBe4 Principal Lab Researcher. Not content just to make tax season even more miserable than it already is, malicious actors are increasingly maneuvering to capitalize on ...
Continue Reading

[Heads-Up] North Korean Malware Found On Indian Nuclear Plant's Network

I am not a happy camper. This is exactly why I have been insisting on security awareness training for employees at critical infrastructure organizations. This could have been a Real Life ...
Continue Reading

Lessons Learned From Vishing Robocall Attacks In Mandarin

Among the specialized forms of vishing are those that target specific language communities. Chinese-speaking people in the US and around the world are increasingly being targeted with ...
Continue Reading

Ransomware Attack Causes School 'District-Wide Shutdown'

A ransomware attack hitting Las Cruces Public Schools forced the district to shut down the entire computer system to contain the infection.
Continue Reading

Vishing, from (not) the Bank

We saw yesterday how phishing affects the financial sector. Here we see another, related trend: impersonation attacks that purport to be from the victim’s bank.
Continue Reading

[NEW FEATURE] KnowBe4 Assessments Help Gauge Proficiency of Your Users in Security Awareness and Sentiment Towards Security Culture

Social engineering attacks continue to be the leading cause of compromised networks and data breaches. Today, organizations of all sizes are susceptible to these attacks and are ...
Continue Reading

A Recent Spate Of Spear Phishing Attacks Is Targeting The Financial Industry

Phishing attacks are getting harder to spot, especially as more attackers realize the value of targeted, well-crafted phishing attacks, according to Johannes Ullrich, the dean of research ...
Continue Reading

Phishing Attack Targets Humanitarian Organizations

Researchers at Lookout have discovered an ongoing phishing campaign targeting humanitarian non-governmental organizations (NGOs), including UNICEF and the Red Cross. The infrastructure ...
Continue Reading

Phishing in Office 365's Pond

Heimdal Security has come across a phishing campaign that uses compromised accounts to target Microsoft users. The attackers use email and social media accounts they’ve already breached ...
Continue Reading

Data Breaches Devastate Small Businesses in 2019 with 10 Percent Closing Their Doors

A new report from the National Cyber Security Alliance sheds some light on how prepared small and medium size businesses are and what the aftermath of a data breach really looks like.
Continue Reading

FBI Updates Initiative to Protect U.S. Elections from Cyberattacks

FBI has updated and expanded the resources and tools designed to help political campaigns, private businesses, and individuals to better understand and mitigate risks posed by foreign ...
Continue Reading

CNN Says "Hack Our Reporter," and White Hat Rachel Tobac *Does*

It’s “disturbingly easy” to steal someone’s personal data using information gleaned from their social media accounts, according to Donie O’Sullivan at CNN. O’Sullivan met with Rachel ...
Continue Reading

Get the latest about social engineering

Subscribe to CyberheistNews