Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

Report: Social Engineering Remains a Central Part of AI-assisted Attacks

Jul 15, 2026 By KnowBe4 Team In KnowBe4
Threat actors continue to rely on social engineering as AI is incorporated into their attacks, according to ESET’s Threat Report for the first half of 2026. ESET’s Director of Threat Prevention Labs, Jiří Kropáč, stated, “Rather than relying on entirely new methods and tools, attackers are quickly adapting established techniques to new platforms, technologies, and user behaviors.
Read Post
knowbe4

ClickFix Social Engineering is Now the Leading Malware Delivery Method

Jul 14, 2026 By KnowBe4 Team In KnowBe4
The ClickFix social engineering technique is now the top malware delivery method, according to a new report from ReliaQuest. These attacks trick users into copying a malicious command, then pasting it into a terminal and running it on their computers. “ClickFix remained the dominant delivery method this period and, for the first time, we observed it expand to macOS, delivering infostealers onto a platform many organizations still monitor less closely than Windows,” the researchers write.
Read Post
knowbe4

Hyper-Targeted Social Engineering Needs Real-Time Video Response

Jul 8, 2026 By Nick Gasse In KnowBe4
There’s an important metric that can tell you exactly how vulnerable your high-risk employees and departments are to the next generation of social engineering. It’s not phishing click rates or training completion percentages. It probably doesn’t show up on any security dashboard. It’s the precise number of days it takes your team to respond to a live, context-specific threat with adequate training – training time to market.
Read Post
Physical Mail and the Overlooked Attack Surface

Physical Mail and the Overlooked Attack Surface

Jun 22, 2026 By SecuritySenses In SecuritySenses
Cybersecurity investment has never been higher. Organisations are running zero trust architectures, deploying endpoint detection across every device, and monitoring network traffic in real time. Physical mail rarely appears on the threat register for most security teams, yet mail-based attack vectors are active and documented, and tend to be effective in part because they attract less scrutiny than digital channels.
Read Post
knowbe4

Report: AI-Enabled Social Engineering Attacks Are on the Rise

Jun 8, 2026 By KnowBe4 Team In KnowBe4
Threat actors are increasingly using AI-enabled social engineering to get around technical security measures, according to a new report from Visa. Social engineering attacks were behind the largest number of losses in the second half of last year. “From July to December 2025, Visa identified nearly $1 billion in scam-related activity, making scams the single largest category of consumer payment fraud,” Visa says.
Read Post
knowbe4

[Heads Up] GitHub Breach Shows Developer Tools Are Social Engineering Targets

May 21, 2026 By KnowBe4 Team In KnowBe4
GitHub disclosed that attackers accessed its internal repositories after compromising an employee device through a poisoned Visual Studio Code extension. The company said the activity appears limited to GitHub-owned internal repositories, with the attacker’s claim of roughly 3,800 repositories being “directionally consistent” with its investigation. GitHub also said it found no evidence that customers’ own enterprises, organizations or repositories were impacted.
Read Post
knowbe4

Attackers Continue to Pose as Help Desks in Social Engineering Attacks

May 6, 2026 By KnowBe4 Team In KnowBe4
Researchers at Google’s Threat Intelligence Group (GTIG) are tracking a new threat actor that’s impersonating help desks to trick users into installing malware. The threat actor, which GTIG tracks as “UNC6692,” begins by sending a large volume of spam emails to the victim, then initiates contact via Microsoft Teams to ostensibly help the user block the spam.
Read Post
Persistent Online Worlds, Persistent Risks: The Security Challenges of MMORTS Games

Persistent Online Worlds, Persistent Risks: The Security Challenges of MMORTS Games

Apr 28, 2026 By SecuritySenses In SecuritySenses
Massively multiplayer online real-time strategy games occupy a specific and underexamined position in the gaming security landscape. Unlike session-based games where a match ends and the state resets, MMORTS titles run continuous worlds where player-built empires, alliances, and resource stockpiles exist around the clock, whether or not the player is logged in. That persistence creates a threat model significantly closer to financial services platforms than most people in either the security or gaming industries tend to acknowledge.
Read Post
knowbe4

Voice Phishing is a Growing Social Engineering Threat

Apr 8, 2026 By KnowBe4 Team In KnowBe4
Voice phishing (vishing) overtook email-based phishing as a top initial intrusion vector in 2025, according to a new report from Mandiant. Notably, vishing is live and interactive, giving the attacker more control over the social engineering objectives. “While email phishing often relies on volume and opportunistic delivery, interactive methods involve a live person steering the conversation in real-time,” Mandiant says.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.