Should You Use Controversial Simulated Phishing Test Emails?

Oct 13, 2023 1:34:39 PM By Roger Grimes

The Wall Street Journal recently published an article about using highly-emotionally charged, “controversial”, subjects in simulated phishing tests. Controversial topic examples include ...

KnowBe4 Named a Leader in the Fall 2023 G2 Grid Report for Security Orchestration, Automation, and Response (SOAR)

Oct 13, 2023 8:00:00 AM By Stu Sjouwerman

We are excited to announce that KnowBe4 has been named a leader in the Fall 2023 G2 Grid Report for Security Orchestration, Automation, and Response (SOAR) for the PhishER platform for ...

New Research: Phishing Remains the Most Popular Technique for Bad Actors

Oct 12, 2023 12:11:26 PM By Stu Sjouwerman

A report from Trustwave notes that phishing remains one of the most popular and effective techniques for attackers to gain access to organizations.

Beware of Bogus Roborock Retailers: The Perils of Misleading URLs in E-Commerce

Oct 12, 2023 12:11:22 PM By Martin Kraemer

Roborock's online storefronts have been used for cybercrime schemes in the past, and it seems attackers are continuing to create fake online shops. After all, the Chinese-originated robot ...

New Cyber Attack Techniques Will Not Replace Old-School Social Engineering

Oct 12, 2023 8:01:53 AM By Stu Sjouwerman

Even though there are new attack types for cybercriminals, they are still leveraging old-school attack vectors. Why? Because they still work.

Business Email Compromise Attempts Skyrocket in the Last Year

Oct 12, 2023 8:01:44 AM By Stu Sjouwerman

Threat actors launched 156,000 business email compromise (BEC) attempts per day between April 2022 and April 2023, according to Microsoft’s latest Digital Defense Report. While most of ...

KnowBe4 Named a Leader in the Fall 2023 G2 Grid Report for Security Awareness Training

Oct 11, 2023 1:10:35 PM By Stu Sjouwerman

We are thrilled to announce that KnowBe4 has been named a leader in the latest G2 Grid Report that compares security awareness training (SAT) vendors based on user reviews, customer ...

Register for KB4-CON EMEA 2023 Now!

Oct 9, 2023 9:20:10 AM By Stu Sjouwerman

Exciting news, registration for KB4-CON EMEA 2023 is open!

Ransomware Attack Dwell Time Drops by 77% to Under 24 Hours

Oct 9, 2023 8:17:46 AM By Stu Sjouwerman

As attackers evolve their toolsets and processes, the significant drop in dwell time signifies a much higher risk to organizations that now have less time to detect and respond to initial ...

One Out of Five Organizations Must Improve Their Security Posture to be Eligible for Cyber Insurance

Oct 9, 2023 8:16:12 AM By Stu Sjouwerman

As insurers become more educated on what a “secure organization” looks like, they are tightening their requirements that puts the onus on organizations to be more secure.

Clorox Experiences Significant Financial Loss Stemming From Recent Cyber Attack

Oct 6, 2023 9:53:51 AM By Stu Sjouwerman

American global manufacturer of cleaning products Clorox stated that recent sales and profit loss were related to a cyber attack.

New Gartner Forecast Shows Global Security and Risk Management Spending to Increase by 14% in 2024

Oct 5, 2023 3:26:29 PM By Stu Sjouwerman

Gartner issued a press release that forecasted global security and risk management end-user spending to reach $188.1 billion, along with worldwide end-user spending on security and risk ...

Senior Executives Beware: The Rise of EvilProxy Phishing Campaigns

Oct 5, 2023 8:20:01 AM By Stu Sjouwerman

Menlo Security warns that a social engineering campaign is using the EvilProxy phishing kit to target senior executives across a range of industries, including banking and financial ...

Open-Source Intelligence (OSINT): Learn the Methods Bad Actors Use to Hack Your Organization

Oct 4, 2023 10:55:26 AM By Stu Sjouwerman

They are out there, watching and waiting for an opportunity to strike; the bad actors who have carefully researched your organization in order to set the perfect trap using easily found ...

Generative AI and the Automation of Social Engineering Increasingly Used By Threat Actors

Oct 3, 2023 10:43:44 AM By Stu Sjouwerman

Threat actors continue to use generative AI tools to craft convincing social engineering attacks, according to Glory Kaburu at Cryptopolitan.

Lazarus Attack on Spanish Aerospace Company Started with Messages from Phony Meta Recruiters

Oct 2, 2023 12:29:11 PM By Stu Sjouwerman

A recent attack on an undisclosed Spanish aerospace company all started with messages to the company's employees that appeared to be coming from Meta recruiters, via LinkedIn Messaging. ...

New SMS Phishing Campaign Impersonating The US Postal Service

Oct 2, 2023 10:45:00 AM By Stu Sjouwerman

DomainTools is tracking an increase in SMS phishing (or “smishing”) campaigns impersonating the US Postal Service (USPS). The text messages inform recipients that there’s a problem with ...

Security Awareness Is Dead. Long Live Security Awareness

Sep 29, 2023 4:47:31 PM By Martin Kraemer

Our actions determine outcomes, not our thoughts, our knowledge, or our intentions.

Your KnowBe4 Fresh Content Updates from September 2023

Sep 29, 2023 9:00:00 AM By Stu Sjouwerman

Check out the 66 new pieces of training content added in September, alongside the always fresh content update highlights, events and new features.

[Live Demo] Ridiculously Easy Security Awareness Training and Phishing

Sep 29, 2023 8:00:00 AM By Stu Sjouwerman

Old-school awareness training does not hack it anymore. Your email filters have an average 7-10% failure rate; you need a strong human firewall as your last line of defense.

Security Awareness Training Blog