Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

Phishing Campaign Abuses iCloud Calendar Invites

Sep 11, 2025 By KnowBe4 Team In KnowBe4
Attackers are abusing iCloud Calendar invites to send phishing messages that pose as PayPal notifications, BleepingComputer reports. Since the messages are sent from Apple’s infrastructure, they’re more likely to bypass security filters. BleepingComputer explains, “This email is actually an iCloud Calendar invite, where the threat actor included the phishing text within the Notes field and then invited a Microsoft 365 email address that they controlled.
Read Post
knowbe4

"Yep, I got pwned. Sorry everyone, very embarrassing."

Sep 10, 2025 By Martin Kraemer In KnowBe4
In essence, that is the disclosure and notification message that the open-source developer "qix" sent to the world when he was social engineered to give up access credentials to his GitHub account. Using his account, the attackers inserted malware in a series of popular NPM packages to direct cryptocurrency payments to their own wallets.
Read Post
knowbe4

Report: Shadow AI Poses an Increasing Risk to Organizations

Sep 10, 2025 By KnowBe4 Team In KnowBe4
The use of “shadow AI” is an increasing security risk within organizations, according to a new report from Netskope. Shadow AI is a newer variant of shadow IT, in which employees use unauthorized technology without the knowledge of the IT department. This is generally driven by a desire for increased productivity rather than malicious motives, but employees are often unaware of the risks introduced by unauthorized tools.
Read Post
knowbe4

Advanced Educational Competition - Ask Your Employees To Submit Their Best Phishing

Sep 5, 2025 By Roger Grimes In KnowBe4
I occasionally get human risk management (HRM) administrators asking me to help them with ideas of “contests” to better educate their end-users. They have usually done the traditional recommendations, which means at least monthly-to-weekly security awareness training (SAT) and simulated phishing. They are working to educate their end-users about social engineering and phishing attacks as best as they can without being overly annoying.
Read Post
knowbe4

Smishing Campaign Targets California Taxpayers With Phony Refund Offers

Sep 5, 2025 By KnowBe4 Team In KnowBe4
The State of California’s Franchise Tax Board (FTB) has warned of an ongoing SMS phishing (smishing) campaign targeting residents, Malwarebytes reports. The FTB stated, “These text messages contain a link to a fraudulent version of certain FTB web pages, which are designed to steal personal and banking information.
Read Post

KnowBe4: The Most Advanced Human Risk Management Platform

Sep 5, 2025 By KnowBe4 | Human Risk Management In KnowBe4
Strengthen your organization's security with the KnowBe4 human risk management platform! KnowBe4 helps you manage and reduce cyber risk by focusing on the human layer of security. Traditional security measures often overlook the fact that people are the biggest variable in your defense. KnowBe4's comprehensive platform goes beyond simple training, providing a full suite of tools to build a strong security culture and transform your employees from a potential vulnerability into your strongest line of defense.
View Video
knowbe4

Warning: New Spear Phishing Campaign Targets Executives

Sep 5, 2025 By KnowBe4 Team In KnowBe4
Researchers at Stripe warn of a wave of spear phishing attacks targeting C-suite employees and senior leadership across a wide range of industries. The emails pose as OneDrive document-sharing notifications with subject lines like “Salary amendment” or “FIN_SALARY.” If a user clicks the link, they’ll be taken to a spoofed Microsoft Office/OneDrive login page designed to steal their credentials.
Read Post
knowbe4

Hospitals Need to Prepare for AI-Powered Phishing Attacks

Sep 4, 2025 By KnowBe4 Team In KnowBe4
Healthcare organizations need to be prepared for an increase in AI-assisted phishing attacks, according to Zack Martin, Senior Policy Advisor at Venable. In an article for HIT Consultant, Martin explained that AI has made phishing attacks more convincing and easier to launch, posing a heightened risk to healthcare organizations.
Read Post
knowbe4

Report: AI Can Now Automate Entire Attack Chains

Sep 4, 2025 By KnowBe4 Team In KnowBe4
Threat actors can now use AI tools to automate entire attack operations, according to a new report from Anthropic. The company says an attacker abused its Claude AI tool to create a hacking and extortion campaign that compromised at least seventeen organizations. The attacker used Claude to conduct reconnaissance, initial access, malware development, data exfiltration, and extortion analysis.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.