Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

Number of Named Ransomware Victim Organizations Jumps 64% in One Quarter

Aug 11, 2023 By Stu Sjouwerman In KnowBe4
The second quarter of this year has become the focus of some new firsts in ransomware attacks, according to new data from cybersecurity vendor Reliaquest. None of us want to see ransomware continue “up and to the right” on a chart. But it appears that this is the case, according to Reliaquest’s Ransomware Report: Q2 2023. In the report, we find that the number of ransomware victim organizations named on the dark web jumped from 838 in Q1 of 2023 to 1,378 in Q2 – a 64.4% increase.
Read Post
knowbe4

Salesforce Becomes the Latest Platform to Unwittingly Aid Phishing Scammers

Aug 11, 2023 By Stu Sjouwerman In KnowBe4
Cybercriminals used the legitimacy of Salesforce’s email gateway to bypass security scanners and target Meta customers in an effort to steal Facebook credentials. One of the initial challenges any phishing attack has is to make it past security measures designed to scan and identify malicious emails. One such way is to misuse a legitimate well-known platform’s outbound sending of emails.
Read Post

The Dark Side of AI: Unmasking its Threats

Aug 11, 2023 By KnowBe4 In KnowBe4
Artificial Intelligence (AI) has come roaring to the forefront of today’s technology landscape. It has revolutionized industries and will modernize careers, bringing numerous benefits and advancements to our daily lives. However, it is crucial to recognize that AI also introduces unseen impacts that must be understood and addressed for your employees and your organization as a whole. Watch James McQuiggan, Security Awareness Advocate at KnowBe4, in this thought-provoking on-demand webinar where he’ll discuss the unforeseen threats of AI and how to protect your network.
View Video
knowbe4

Comcast: 9 out of 10 Attempts to Breach Customer Networks Start with a Phish

Aug 11, 2023 By Stu Sjouwerman In KnowBe4
The latest data from Comcast Business’ analysis of over 23.5 billion cyber attacks on their business customers shows the importance and role of phishing in attacks. Over the years there has been a consistent mantra, where everyone agrees that “90-something” percent of cyber attacks start with phishing. There have been plenty of sources that corroborate this using percentages in the 90th percentile, but the overall message is phishing is your greatest Initial Access tactic.
Read Post
knowbe4

AI's Role in Cybersecurity: Black Hat USA 2023 Reveals How Large Language Models Are Shaping the Future of Phishing Attacks and Defense

Aug 10, 2023 By Stu Sjouwerman In KnowBe4
At Black Hat USA 2023, a session led by a team of security researchers, including Fredrik Heiding, Bruce Schneier, Arun Vishwanath, and Jeremy Bernstein, unveiled an intriguing experiment. They tested large language models (LLMs) to see how they performed in both writing convincing phishing emails and detecting them. This is the PDF technical paper.
Read Post
knowbe4

Record ¥3 bil stolen via phishing in Japan in 1st half of 2023

Aug 9, 2023 By Stu Sjouwerman In KnowBe4
A record 2,322 scams in Japan to steal internet banking IDs and passwords have resulted in unauthorized money transfers totaling a record of around 3 billion yen ($21 million) in the first half of this year, a report by the National Police Agency showed Tuesday. The number of cases mainly involving phishing this year has already surpassed the annual total of any previous year, with the financial loss approaching the record high of 3.07 billion yen set in 2015, according to the agency.
Read Post
knowbe4

New PCI Password Requirements Could Be the Impetus for Credential Harvesting Scams

Aug 9, 2023 By Stu Sjouwerman In KnowBe4
As the retirement countdown for the current version of PCI is now less than six months, a new standard for password length, complexity, and change frequency may create some risk. Valid credentials have become a very hot item, as threat actors realize the low risk and high value of simply becoming an Initial Access Broker (rather than performing an entire cyber attack themselves).
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.