Fraud & Scams

Your next car could be watching your face

Driver-monitoring technology is becoming mandatory in new cars, but privacy experts warn it could create new risks alongside the s…

Your Email is Protected. Is Your Teams Chat?

For years, security teams have poured resources into locking down the inbox, and for good reason. Email has always been the front…

How the Reddit and Discord false report scam steals accounts

Scammers are tricking Reddit and Discord users into handing over login codes by claiming they were involved in a false report.

Fake Netflix, Coca-Cola, and FIFA job scams target marketers

A fake recruiter phishing campaign uses trusted brands, nested redirects, and fake Google prompts to steal accounts.

CyberheistNews Vol 16 #27 [HOW TO] Your Cybersecurity Starts at Home on World Social Media Day

2026 Phishing by Industry Benchmarking Report: Findings on Human Risk

Every year, KnowBe4 analyzes millions of simulated phishing tests to measure one thing: how likely is your workforce to fall for a…

FTC Sends More Than $2.7 Million to Consumers Harmed by Handy Technologies

Image The Federal Trade Commission is sending checks totaling more than $2.7 million to eligible consumer…

Claude Code’s hidden tracker was an “experiment,” says Anthropic

Anthropic's hidden Claude Code tracker has raised new questions about prompt steganography and developer trust.

Static DLP Is Leaving You in the Dark: Why It’s Time for Intelligent, Self-Serve Outbound DLP and Misdirected Content Analysis

When we think about email security, our minds almost always jump to the inbound threats: the sophisticated phishing lures, the AI-…

Scammers are using AI to sell impossible flowers

AI-generated flower scams are blooming online, with scammers using fake images to sell seeds for plants that don't exist, like the…

How to tell if an image is AI-generated

Scammers are using AI-generated images to make fake stories more convincing. Here's how to separate real from fake.

Choose your WhatsApp username carefully

WhatsApp is introducing usernames to help protect your phone number. Just make sure you don't undermine that privacy by choosing t…

FTC Warns Companies Making Questionable ‘Made in the USA’ Claims

The Federal Trade Commission today issued warning letters to seven companies that appear to have misrepresented certain products a…

NetNut botnet takes a hit. Don’t be part of the next one.

Google, the FBI, and other partners have disrupted a residential proxy network built on millions of hijacked devices and used by c…

A week in security (June 29 – July 5)

A list of topics we covered in the week of June 29 to July 5 of 2026

Verified X ad spreads Mac malware, while ConsentFix steals Microsoft accounts

Two new campaigns show how cybercriminals are increasingly relying on social engineering instead of software exploits to compromis…

INC Ransomware Gang Targets the Legal Sector

The INC ransomware-as-a-service (RaaS) operation has grown into one of the premier ransomware offerings, claiming hundreds of vict…

Apple’s Hide My Email doesn’t hide it very well

A year ago a researcher found a vulnerability in Apple's Hide My Email feature and now he's tired of waiting for a fix.

Fake Google and Cloudflare verification pages spread multiple malware families

We uncovered ClickFix attacks using fake Google and Cloudflare pages to deliver everything from infostealers to a newly discovered…

5 Essential Cybersecurity Defenses for Cloud Email Security

Cloud email has become the center of modern business. Regardless of your organization's industry or size, email connects employees…

Cybercriminals Are Targeting the FIFA World Cup 2026

KnowBe4 ThreatLabs tracked phishing campaign activity from the first week of April through June 22, 2026 — covering the pre-tourna…

WinRAR flaw could allow attackers to take control of your computer

A new WinRAR update fixes a serious security flaw, but without automatic updates many users could miss the patch.

FTC Approves Final Order Against Publishing.com, Settling Allegations It Misled Consumers

The Federal Trade Commission finalized an order with Publishing.com LLC and its two principals, settling allegations that they mis…

Travel App Hopper to Pay $35 Million to Settle FTC Allegations It Charged Fees Without Consent and Deceived Users About Fees and Benefits of Some Products

The companies that operate the Hopper travel apps have agreed to pay $35 million and will be prohibited from deceiving consumers a…

Fake Perplexity Chrome extension spies on your searches

A fake Perplexity Chrome extension secretly monitored searches. If you installed "Search for perplexity ai," you need to remove it…

Happy 3rd Birthday to Our KnowBe4 Community!

Can you believe it? It’s here — three years of KnowBe4 Community!

Why Bite-Sized Security Awareness Training Matters in an Age of TikTok and Digital Distraction

In cybersecurity, attention has become one of our most valuable resources. Modern digital habits have fundamentally changed how we…

Phishing Exposes Employee Data at 86% of Fortune 100 Companies

A new report from SpyCloud has found that phishing attacks have exposed employee data at 86% of Fortune 100 companies over the pas…

Shadow AI Is Not Shadow IT With a Better Marketing Budget

I saw a venn diagram on social media. One circle is Shadow IT, one circle is Shadow AI, a substantial overlap, and the implicit me…

BioShocking: when “gaming” AI agents is no longer a game

Researchers warned AI vendors about a proof-of-concept called BioShiocking that tricks agents by gamifying the outcome.