KnowBe4 Blog

Bypassing the Gatekeepers: How a Global Phishing Campaign Turns Google's Infrastructure into a Trust Proxy

KnowBe4 Threat Lab — Fri, 04 Sep 2026 20:00:01 GMT

Lead Analysts: Prabhakaran Ravichandhiran, Jeewan Singh Jalal

Recruitment-Themed Phishing Campaign Targets Enterprise Users

KnowBe4 Team — Wed, 02 Sep 2026 20:30:01 GMT

Researchers at Zimperium are tracking widespread phishing campaigns that use Browser-in-the-Browser (BitB) attacks to trick users into handing over their enterprise credentials. The attackers impersonate real HR employees at major companies and target job seekers with extremely realistic interview processes.

New Phishing Kit Uses AI to Fully Automate Vishing Attacks

KnowBe4 Team — Wed, 02 Sep 2026 16:00:01 GMT

A new phishing kit is using generative AI to fully automate voice phishing (vishing) attacks, according to researchers at Group-IB.

The phishing platform, called “Balonx,” includes a module dubbed “CallFlow” that the researchers say “represents a fundamental evolution” in the phishing-as-a-service market. This module uses four commercial AI services to conduct the attacks: OpenAI’s GPT-4o-mini, ElevenLabs’s AI voice generator, OpenAI Voice, and OpenAI Whisper.

Hacking the Healers: New KnowBe4 Whitepaper Highlights Record Security Breaches in Healthcare

Erich Kron — Wed, 02 Sep 2026 11:00:01 GMT

When an organization has a security breach, it can cause significant financial, reputational and logistical damage. But in healthcare, where patient lives are on the line, the consequences can be much more catastrophic.

KnowBe4’s latest whitepaper on healthcare cybersecurity, “Hacking the Healers: How the Digital Workforce Became Cybersecurity's Frontline,” examines how decentralized clinical operations, remote staff and autonomous AI agents have dissolved traditional network perimeters, leaving healthcare organizations and patient safety vulnerable to targeted cyberattacks.

CyberheistNews Vol 16 #35 [New Report] Phishing Is Still the No. 1 Initial Threat Access Vector

KnowBe4 Team — Tue, 01 Sep 2026 13:30:00 GMT

Warning: Chameleon SEO Poisoning Spreads Phishing Pages

KnowBe4 Team — Tue, 01 Sep 2026 13:00:01 GMT

Cloaked SEO poisoning attacks surged by 40% in the second quarter of 2026, according to researchers at Fortra. This tactic, also known as “Chameleon SEO poisoning,” uses cloaked search engine results to spread phishing sites.

Attackers Abuse Enterprise Collaboration Tools to Avoid Detection

KnowBe4 Team — Mon, 31 Aug 2026 16:00:00 GMT

Threat actors’ abuse of enterprise collaboration tools increased fourfold over the past twelve months, according to researchers at Palo Alto Networks’ Unit 42.

Protecting Every Conversation: Introducing KnowBe4 Defend for Google Workspace

Haylea Reiner, MBA — Mon, 31 Aug 2026 11:00:02 GMT

Google Workspace powers more than 3 billion active users globally. From agile mid-market firms to global enterprise operations, Gmail and Google Workspace serve as the digital backbone for millions of teams.

Warning: Replying to a “Wrong Number” Text Marks You as a Target for Scams

KnowBe4 Team — Fri, 28 Aug 2026 20:00:00 GMT

Attackers are using “wrong-number” texts to identify potential targets for scams, according to researchers at Malwarebytes.

These texts appear to be harmless messages meant for another person, such as “Are we still on for dinner tomorrow?” or “Where’s the PowerPoint?” Recipients often try to be helpful by replying to let the person know they’ve got the wrong number. This reply, however, informs the threat actor that the phone number is active and marks it for future scams.

The .vu Surge: How Threat Actors Are Exploiting Vanuatu's Domain Extension

KnowBe4 Threat Lab — Fri, 28 Aug 2026 17:30:00 GMT

Lead Analysts: Prabhakaran Ravichandhiran, Jeewan Singh Jalal, Karthikeyan Dharmaraj and Sripathi Kumar