IT Leaders Can’t Stop AI and Deepfake Scams as They Top the List of Most Frequent Attacks

Apr 4, 2024 9:09:49 AM By Stu Sjouwerman

New data shows that the attacks IT feels most inadequate to stop are the ones they’re experiencing the most.

Malicious App Impersonates McAfee to Distribute Malware Via Text and Phone Calls

Apr 3, 2024 12:36:29 PM By Stu Sjouwerman

A trojanized version of the McAfee Security app is installing the Android banking Trojan “Vultur,” according to researchers at Fox-IT. The attackers are spreading links to the malicious ...

New Report Shows Phishing Links and Malicious Attachments Are The Top Entry Points of Cyber Attacks

Apr 3, 2024 12:36:17 PM By Stu Sjouwerman

New TTP attack data covering 2023 sheds much needed light on the threat actor and user actions that are putting organizations at the most risk.

CyberheistNews Vol 14 #14 [SCARY] Research Shows Weaponized GenAI Worm That Gets Distributed Via A Zero Click Phishing Email

Apr 2, 2024 9:00:00 AM By Stu Sjouwerman

Despite Cybersecurity Improvements in UK Organizations, Attacks Still Persist

Apr 1, 2024 11:43:19 AM By Stu Sjouwerman

The UK government's third phase of research shows how well UK organizations have been improving their cybersecurity efforts but indicates that the risk from certain attacks have only been ...

Thread Hijacking Phishing Attack Targets Pennsylvania Journalist

Apr 1, 2024 11:43:16 AM By Stu Sjouwerman

A journalist in Pennsylvania was targeted by phishing attacks that involved thread hijacking, according to Brian Krebs at KrebsOnSecurity.

Must-Read New Study on Russian Propaganda Techniques

Apr 1, 2024 10:30:14 AM By Stu Sjouwerman

The Kyiv Post just published: "A knockout study by the Institute for the Study of War (“ISW”), just out March 27, is a must read for all the leadership of the West, and particularly, the ...

Your KnowBe4 Compliance Plus Fresh Content Updates from March 2024

Apr 1, 2024 8:00:00 AM By Stu Sjouwerman

Check out the March updates in Compliance Plus so you can stay on top of featured compliance training content.

Russian Federation-backed threat group APT29 Now Targeting German Political Parties

Mar 29, 2024 12:07:37 PM By Stu Sjouwerman

New analysis of APT29’s (aka Cozy Bear) activities and their association with Russia’s Foreign Intelligence Service (SVR) has revealed suspected attempts to collect political intelligence.

Narwhal Spider Threat Group Behind New Phishing Campaign Impersonating Reputable Law Firms

Mar 29, 2024 12:07:32 PM By Stu Sjouwerman

Using little more than a well-known business name and a invoice-related PDF, the “NaurLegal” phishing campaign aims at installing malware trojans.

75% of Organizations Believe They Are at Risk of Careless or Negligent Employees

Mar 29, 2024 11:06:17 AM By Stu Sjouwerman

New data shows organizations are well aware that their users are one of their greatest cybersecurity risks today, and yet aren’t taking the right steps to remediate the risk.

New Malware Loader Delivers Agent Tesla Remote Access Trojan Via Phishing

Mar 29, 2024 11:06:12 AM By Stu Sjouwerman

A new malware loader is delivering the Agent Tesla remote access Trojan (RAT), according to researchers at Trustwave SpiderLabs. The malware is distributed by phishing emails with ...

Your KnowBe4 Fresh Content Updates from March 2024

Mar 29, 2024 8:00:00 AM By Stu Sjouwerman

Check out the 35 new pieces of training content added in March, alongside the always fresh content update highlights, events and new features.

[New Feature] Start Coaching Your Users in Real Time With the New Google Chat Integration for KnowBe4's SecurityCoach

Mar 28, 2024 9:17:30 AM By Stu Sjouwerman

Attention Google Workspace users! You’ve asked, and we’ve delivered, integrating KnowBe4's SecurityCoach with Google Chat.

The Number of New Pieces of Malware Per Minute Has Quadrupled in Just One Year

Mar 27, 2024 1:03:56 PM By Stu Sjouwerman

The threat of novel malware is growing exponentially, making it more difficult for security solutions to identify attachments and links to files as being malware.

A Simple 'Payment is Underway' Phishing Email Downloads RATs from AWS, GitHub

Mar 27, 2024 1:03:46 PM By Stu Sjouwerman

Analysis of a new initial access malware attack shows how simple these attacks can be while also proving that malware can reside on legitimate repositories.

[SCARY] Research Shows Weaponized GenAI Worm That Gets Distributed Via A Zero Click Phishing Email

Mar 27, 2024 6:52:52 AM By Stu Sjouwerman

Israeli researchers came out with a hell of a thing just now. Here is a bit of the abstract and a video. YIKES.

It’s Official: Cyber Insurance is No Longer Seen as a 'Safety Net'

Mar 26, 2024 11:38:51 AM By Stu Sjouwerman

A new report on the state of email security sheds some light on how organizations are viewing and approaching cyber insurance as they shift strategy toward being cyber resilient.

New Phishing-as-a-Service Kit Attempts to Bypass MFA

Mar 26, 2024 11:38:48 AM By Stu Sjouwerman

A Phishing-as-a-Service (PhaaS) platform called “Tycoon 2FA” has surged in popularity over the past several months, according to researchers at Sekoia. The phishing kit is notable for its ...

CyberheistNews Vol 14 #13 If Social Engineering Accounts for Up to 90% of Attacks, Why Is It Ignored?

Mar 26, 2024 9:04:38 AM By Stu Sjouwerman

Security Awareness Training Blog

View Topics