What Microsoft’s Latest Email Benchmark Proves About Defense-in-Depth

Let’s face it: inertia is often the most common yet most dangerous adversary when it comes to acquiring new technology, especially in cybersecurity.

September 24, 2026 KnowBe4 Team

Sophisticated Phishing Operation Continues to Thrive Following FBI Takedown

China-based cybercriminals are using a sophisticated phishing-as-a-service platform called the “Outsider Phishing Kit” to launch massive phishing campaigns around the world, according to ...

September 23, 2026 KnowBe4 Threat Lab

Are Your AI Assistants the Next Attack Surface?

Lead Analysts: Shikhar Dalela, Maddhav Grandy and Jeewan Singh Jalal

September 16, 2026 KnowBe4 Team

Warning: New Phishing Kit Targets Hundreds of Organizations

Attackers have used a new phishing platform called “BigBear 2.0” to target hundreds of organizations across more than forty countries, according to researchers at CloudSEK. In about 10% ...

September 15, 2026 KnowBe4 Team

Attackers Use Passkey-Themed Phishing to Breach Cloud Environments

Researchers at Microsoft are tracking a social engineering campaign that uses passkey-themed lures to trick users into granting persistent access to their accounts and online work ...

September 15, 2026 KnowBe4 Team

Phishing Emails Use New Technique to Bypass Microsoft 365 Security Filters

Threat actors are using phishing emails with blank SMTP sender fields to bypass Microsoft 365 security filters, according to researchers at ReliaQuest. Microsoft 365 Exchange Online uses ...

September 14, 2026 KnowBe4 Team

Social Engineering Campaign Uses Phony NDAs to Avoid Detection

Researchers at Gen Digital are tracking a sophisticated social engineering campaign that’s using phony NDA documents to trick employees into moving the conversation to WhatsApp and ...

September 14, 2026 KnowBe4 Team

Warning: “Slop Squatting” Directs AI Users to Phishing Pages

Threat actors are increasingly leveraging AI hallucinations to plant phishing links and other malicious content in AI output, IEEE Spectrum reports. Large language models (LLMs) sometimes ...

September 10, 2026 KnowBe4 Threat Lab

Direct Send: How Attackers Weaponize Your Infrastructure Against You

Lead Analysts: Prabhakaran Ravichandhiran, Jeewan Singh Jalal

September 1, 2026 KnowBe4 Team

Warning: Chameleon SEO Poisoning Spreads Phishing Pages

Cloaked SEO poisoning attacks surged by 40% in the second quarter of 2026, according to researchers at Fortra. This tactic, also known as “Chameleon SEO poisoning,” uses cloaked search ...

KnowBe4 Blog

View Topics