BuzzSec

Let’s be brutally honest. For years, our industry has been locked in a civil war. In one camp, the technologists have been building higher walls and smarter traps, arguing that the right AI-powered, next-gen firewall will solve all our problems. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/why-your-security-strategy-needs-a-human-upgrade

AI-assisted phishing attacks pose a significant and increasing threat to organizations, according to Matt Weidman, partner and vice president of Commercial Property & Casualty at USIA. In an article for CBIA, Weidman explains that attackers can use AI tools to craft targeted, convincing phishing messages that are almost indistinguishable from the real thing. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/ai-assisted-phishing-attacks-are-an-increasingly-serious-threat

from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/cyberheistnews-vol-15-37-new-report-shadow-ai-threats-are-increasing-heres-how-to-spot-them

AI-powered social engineering attacks are significantly more successful than traditional attacks, according to a new report from cyber risk management firm Resilience. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/report-ai-powered-phishing-fuels-ransomware-losses

The FBI and the American Bankers Association (ABA) have issued a joint advisory warning of the growing threat posed by AI-generated deepfake scams . from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/fbi-issues-guidance-for-avoiding-deepfake-scams

One of the most common human risk management recommendations is for users to hover over URL links of unexpected messages to see if the involved DNS domain is legitimate or not for the sending company involved. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/paypal-scam-from-paypal

I occasionally get human risk management (HRM) administrators asking me to help them with ideas of “contests” to better educate their end-users. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/advanced-educational-competition-ask-your-employees-to-submit-their-best-phishing

Researchers at Stripe warn of a wave of spear phishing attacks targeting C-suite employees and senior leadership across a wide range of industries. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/warning-new-spear-phishing-campaign-targets-executives

A super common voice phone call phishing scam (i.e., vishing) is when the scammer calls you and pretends to be a law enforcement official with a warrant for your arrest for not answering a court jury duty summons. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/a-warrant-is-out-for-your-arrest

Threat actors can now use AI tools to automate entire attack operations, according to a new report from Anthropic. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/report-ai-can-now-automate-entire-attack-chains

Many years ago, a friend of mine worked as a security director at a firm and had what they called an “audit box.” It was a pre-prepared box filled with policies, network diagrams, security controls and checkboxes. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/beyond-the-audit-box-building-security-that-works-in-the-real-world

from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/cyberheistnews-vol-15-35-watch-out-hackers-now-use-ai-to-write-better-phish

Check out the August updates in Compliance Plus so you can stay on top of featured compliance training content. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/your-knowbe4-compliance-plus-fresh-content-updates-from-august-2025

“The problem is much, much worse than most people acknowledge.” One of the biggest enduring mysteries for me in cybersecurity is why most cybersecurity curricula don’t teach secure coding to programmers. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/one-of-the-biggest-mysteries-in-cybersecurity-why-dont-we-teach-or-demand-secure

Check out the 19 new pieces of training content added in August, alongside the always fresh content update highlights, new features and events. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/your-knowbe4-fresh-content-updates-from-august-2025

It’s that exhilarating time of year again! Summer is winding down, and the back-to-school season is in full swing—a truly fantastic time to focus on the power of education, not just in the traditional sense, but especially in the ever-evolving digital world. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/back-to-school-a-cybersecurity-education-for-all-ages

You've probably seen them: enticing online offers for free products from brands you trust, like a Yeti beach chair from Costco or an emergency car kit from AAA. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/the-hidden-cost-of-free-gifts-how-survey-scams-are-evolving-to-steal-financial-data

In this series, we first explored the psychology that makes HR phishing so effective, then showcased the real-world lures attackers use to trick your employees. Now, we’re going under the hood to answer the critical question: How do these attacks technically bypass security defenses? from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/the-attackers-playbook-a-technical-analysis-of-quishing-and-encrypted-svg-payloads-used-in-hr-impersonation-phishing-attacks

The North Korean threat actor ScarCruft has incorporated ransomware into its arsenal, according to researchers at South Korean security firm S2W. from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/north-korean-threat-actor-delivers-ransomware-via-phishing-emails

from KnowBe4 Security Awareness Training Blog https://blog.knowbe4.com/cyberheistnews-vol-15-33-beware-when-your-ai-helper-becomes-a-hackers-dream-tool