KnowBe4 Blog

Keeping you informed. Keeping you aware.
Stay on top of the latest in human and agent security including social and prompt engineering, ransomware and phishing attacks.

New Training Module: Safe Travels for Road Warriors

I'm excited to announce a new module that has been quite some time in the making! A 12-minute animated course with lots of interactivity for those that travel for business—and some very ...

Employee Negligence – Your Organization's (bigger than you think) Nightmare

A new study shows a vast majority of C-level executives see employee negligence as one of their most pressing security risks.

New Policy Feature Added to the KnowBe4 Platform

KnowBe4 is excited to announce the introduction of the new Policy feature. The Policy feature gives you as an Admin the ability to store, distribute, and track various policy ...

Scam of the Day: Sextortion, Old Passwords, and You

The “Sextortion” phishing scam makes use of compromised password data, recipient gullibility, and visits to porn websites to separate victims from their money. The scam message comes from ...

Scam Of The Week: *Another* New CEO Fraud Phishing Wrinkle

So, here's a new CEO Fraud phish: see these fresh screen shots from emails reported to us through the free KnowBe4 Phish Alert Button. Bad guys spoof the managing partner and CPA and an ...

Effective Social Engineering Matters More than Zero-Days

There's an interesting criminal campaign in progress against government targets in Ukraine. Note that we usually first see them there, and then they spread out to Western Europe and the ...

Samsam Ransomware infected thousands of LabCorp systems via brute force RDP

LabCorp contained the attack within 50 minutes, says they're at about 90-percent operational capacity

Russian Reminders: Phishing is Fruitful

The recent indictment by special counsel Robert Mueller of 12 Russian military officials for the hacking of Democratic servers and emails in 2016 is a powerful reminder – phishing works.

Can We Ever Truly Stop Ransomware?

A recent Class-Action lawsuit against EHR vendor Allscripts raises the question of where fault should lie when ransomware attacks are successful.

FBI Warns that Business Email Compromise (CEO Fraud) is a "$12 Billion Scam"

The FBI is again warning of the threat posed by business email compromise (BEC, aka CEO Fraud) and email account compromise (EAC). Together, says the Bureau, these have cost businesses ...