Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

FBI Alert: OAuth Consent Phishing is Targeting Users of Messaging Apps

Sep 11, 2026 By KnowBe4 Team In KnowBe4
The U.S. Federal Bureau of Investigation (FBI) has issued an advisory warning of a wave of OAuth consent phishing attacks targeting “prominent victims, their family members, and personal acquaintances.” OAuth phishing is an increasingly popular social engineering tactic that tricks users into granting access to their accounts without handing over their passwords.
Read Post
knowbe4

Survey: Companies Cite Phishing as their Top AI-Enabled Fraud Concern

Sep 11, 2026 By KnowBe4 Team In KnowBe4
A recent survey from Experian found that 60% of companies report fraud losses that are “somewhat or significantly higher” than in previous years, with a majority of respondents citing AI-generated phishing attacks as their top AI-related fraud concern. “Businesses identify AI-generated phishing as the most common AI-enabled fraud risk at 53%,” the report says.
Read Post
knowbe4

Direct Send: How Attackers Weaponize Your Infrastructure Against You

Sep 10, 2026 By KnowBe4 Threat Lab In KnowBe4
An employee at your company receives an email from hr@yourcompany.com. The domain matches. There is no warning banner. The message asks them to review a payment approval document. They click. That email was never sent by your HR team. An attacker sent it, and your own Microsoft email infrastructure delivered it, with no password and no credentials required.
Read Post
knowbe4

The Workforce Has a Blind Spot, and It's Ringing

Sep 10, 2026 By KnowBe4 Team In KnowBe4
With inboxes increasingly well guarded, cybercriminals are turning to a more vulnerable front in their attacks against your digital workforce. Voice is the fastest-growing attack vector, and it’s because it’s dangerously effective. According to Verizon’s 2026 Data Breach Investigation Report, phone-centric attacks are 40% more successful than traditional email-based phishing.
Read Post

How The Sack Company Solved "Click Happy" Employees & Reduced Risk Scores with KnowBe4

Sep 8, 2026 By KnowBe4 | Securing Humans & Agents In KnowBe4
The Sack Company implemented KnowBe4 to eliminate "click happy" employee behavior and streamline phishing campaign management across its family of companies. By leveraging KnowBe4’s AI Defense Agents (AIDA) and gamified phishing security awareness training, The Sack Company reduced organizational risk scores while saving 50 to 60 hours per week in IT monitoring time. KEY HIGHLIGHTS & RESULTS: TIMESTAMPS / CHAPTERS.
View Video
knowbe4

Bypassing the Gatekeepers: How a Global Phishing Campaign Turns Google's Infrastructure into a Trust Proxy

Sep 4, 2026 By KnowBe4 Threat Lab In KnowBe4
In addition to everyday users, Google's infrastructure is trusted by email security gateways, enterprise firewalls and automated URL detonation platforms. Threat actors know this.
Read Post
knowbe4

New Phishing Kit Uses AI to Fully Automate Vishing Attacks

Sep 2, 2026 By KnowBe4 Team In KnowBe4
A new phishing kit is using generative AI to fully automate voice phishing (vishing) attacks, according to researchers at Group-IB. The phishing platform, called “Balonx,” includes a module dubbed “CallFlow” that the researchers say “represents a fundamental evolution” in the phishing-as-a-service market.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.