KnowBe4

Threat actors are increasingly abusing trusted workflows to carry out attacks, according to a new report from Gen Digital. “[Attackers] are not only sending malicious links or dropping malware,” the report says. “They are abusing context, sessions, workflows, brands, update systems, advertising platforms and delegated authority.

You cannot protect what you do not know exists. That statement has been true throughout the history of cybersecurity, but it has become even more important as organizations adopt new technologies and employees gain access to powerful AI tools. While many organizations focus on defending against external threats, they often overlook a growing problem much closer to home: devices, applications, and services operating within their environment that nobody knows about.

Secure the Digital Workforce: Human + AI KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score.

An initial access broker for ransomware gangs is targeting organizations with voice phishing (vishing) attacks through Microsoft Teams, according to researchers at Zscaler’s ThreatLabz. “From January through June 2026, ThreatLabz examined a cluster of related campaigns that used Microsoft Teams vishing and Quick Assist for initial access, followed by PowerShell-based staging,” the researchers write. “Post-compromise, the threat actor deployed GoGRPC along with various backdoor and proxying tools.

Secure the Digital Workforce: Human + AI KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score.

A survey from Trustmi found that most employees believe they’d be able to spot a social engineering attack, but those same employees still rely primarily on outdated guidance to spot red flags. Generative AI has given attackers the ability to craft extremely convincing, error-free phishing emails. “Findings suggest employee confidence is rooted in their ability to spot traditional fraud tactics,” the report says.

"Someone online shows them a 'trick' that feels harmless at first. Then the community pulls them in. Everyone's doing it. It feels like skill, not crime." That's a young person from South Africa, describing how their peers slide into cybercrime. Notice what's missing: no villain, no dark web, no hoodie. Just a skill, a community and a sense of finally being good at something.

Secure the Digital Workforce: Human + AI KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score.

Two days at INTERPOL on youth cybercrime, why offender prevention is real police work and why it has to out-recruit rather than out-threaten. Sir Robert Peel defined good policing as "the absence of crime and disorder, and not the visible evidence of police action in dealing with them." Gregory Francis of the Netherlands National Police quoted this at the INTERCOP conference held at INTERPOL headquarters, and this principle framed the entire event.

CyberheistNews Vol 16 #32  |   August 11th, 2026 The Hugging Face Hack Is Now A PR Crisis That’s Costing OpenAI Millions More info on the OpenAI-Hugging Face incident is published. The incident began all the way back in May, not in July. Multiple agents spontaneously coordinated with one another via internal OpenAI infrastructure, sending hundreds of thousands of messages over weeks.