7+ hour, 17+ min ago  (560+ words) Picture this: Your company just fell victim to a massive data breach. The culprit wasn't a sophisticated malware strain, a zero-day exploit, or a compromised firewall. It was a perfectly legitimate-looking login from a VP’s account, originating from an unrecognized…...

1+ day, 7+ hour ago  (200+ words) Threat actors continue to rely on social engineering as AI is incorporated into their attacks, according to ESET’s Threat Report for the first half of 2026. ESET’s Director of Threat Prevention Labs, Jiří Kropáč, stated, “Rather than relying on entirely new…...

1+ day, 6+ hour ago  (1646+ words) Your 2026 Phishing by Industry Benchmarks: The Findings on Human Risk Every year, KnowBe4 analyzes millions of simulated phishing tests to measure one thing: How likely is your workforce to fall for a phishing attack? The results, published in the 2026 Phishing by…...

6+ day, 4+ hour ago  (751+ words) Security must evolve from a static training program into dynamic, AI-powered human and AI risk orchestration embedded across the organization. The sector quickly realized the problem was not only bad content, poorly delivered, but that cybersecurity professionals were asking the…...

1+ week, 17+ min ago  (224+ words) Threat actors are abusing Shop, a legitimate app developed by Shopify, to launch phishing attacks, according to researchers at Gen Digital. Shop is used for making purchases and tracking orders, but threat actors are exploiting the platform to generate in-app…...

1+ week, 1+ day ago  (561+ words) There’s an important metric that can tell you exactly how vulnerable your high-risk employees and departments are to the next generation of social engineering. It’s not phishing click rates or training completion percentages. It probably doesn’t show up on any…...

1+ week, 1+ day ago  (543+ words) For years, security teams have poured resources into locking down the inbox, and for good reason. Email has always been the front door for phishing and social engineering. Unfortunately, another door has been left wide open: Microsoft Teams. Threat actors…...

1+ week, 6+ day ago  (169+ words) The INC ransomware-as-a-service (RaaS) operation has grown into one of the premier ransomware offerings, claiming hundreds of victims in 2026 alone, according to researchers at Acronis. The attackers target a broad range of industries, but have recently prioritized entities in the…...

2+ week, 4+ hour ago  (1103+ words) Cloud email has become the center of modern business. Regardless of your organization's industry or size, email connects employees, customers, vendors, executives, financial systems and critical business processes. Unfortunately, attackers know this too. The good news is that protecting cloud…...

2+ week, 7+ hour ago  (1120+ words) Lead Analysts: Jeewan Singh Jalal and Louis Tiley KnowBe4 ThreatLabs tracked phishing campaign activity from the first week of April through June 22, 2026 — covering the pre-tournament build-up, tournament kickoff and the first twelve days of live match play. Our latest intelligence adds…...