KnowBe4 allows for the export of training content for delivery via LMS systems. This export functionality enables KnowBe4 customers to obtain training content that can then be assigned and delivered in Slack with Haekka.

Data breaches are in the news all the time. And it feels like no companies - large or small, public or private, geography, industry - are safe. We have new data that shows how many IT leaders think breaches are inevitable. It’s not if a breach will occur, it’s when it will occur.

ChatGPT is an AI writer that has gotten a ton of attention since launching last month. Like all things on the Internet, ChatGPT is available for good purposes and for nefarious purposes. We decided to test ChatGPT writing phishing emails as cyber attackers are bound to use it for phishing attacks. The results were a little scary.

It’s 2023, a new year. Unfortunately, that does not mean a slowdown in the attacks that target end-users like you. Social engineering attacks, which attempt to trick you into clicking a link, providing sensitive information on fake websites, or installing malicious software, were on the rise in 2022 and will continue to be a primary method used by cyber attackers in 2023.

As we enter 2023, it is a good time to take stock of activities, assess what is working and what is not working, and prioritize for the year and beyond. This is a common practice to categorize current initiatives and activities as either things to stop or continue.

Phishing attacks are a common method used by cybercriminals to trick individuals into revealing sensitive information, such as login credentials or financial information. One way to reduce the risk of falling victim to a phishing attack is to use passkeys, which are a form of cryptography that uses a public and a private key.

As technology continues to advance and the value of digital assets and data grows into and through 2023, so too do the tactics and technologies used by attackers in the realm of social engineering. In the coming year, it is likely that we will see the emergence of new methods and approaches, as well as the evolution of existing ones.

As the world becomes increasingly reliant on technology, the stakes for cybersecurity only continue to rise. In 2023 and beyond, we can expect hackers to ramp up their efforts to gain access to valuable data that they can use for their own gain. With more of our lives being run through hackable technology and more digital data available through connected devices, it's more important than ever to stay vigilant and protect ourselves from these nefarious actors.

Prediction posts typically either list the obvious or are full of wild guesses. When it comes to cybersecurity and data privacy, we’re going to try to give you both the obvious and our wildest guesses. So, without further ado, here are our predictions for data privacy and 2023.

The devices you employees use have access to their accounts and your data. Securing those devices is an essential part of securing your businesses. With remote access ubiquitous today and more people using personal devices for work (bring your own device), securing devices is a unique challenge.

Uber’s had a bad autumn when it comes to data breaches. This most recent breach was not a breach of Uber’s systems but a breach of one of Uber’s vendors. What can we learn from this breach of a 3rd party?

Security awareness is not new as concept. It dates all the way back to the earliest days of humans through historical and modern warfare until today, where we are constantly under attack. Today, sensitive information, the goal of attackers, is accessible from everywhere. Security awareness needs to evolve to meet the ubiquity of the challenge.

Security awareness is a niche within cybersecurity that is suffering the same fate as the broader market. Companies are buying multiple tools for training, phishing, event-driven training, and human risk. These tools need to be integrated with LMSs, HRISs, and sometimes auth systems. What is often missed is the goal of security awareness - namely to reduce the risk from human actions and behaviors.

Despite near constant education about the importance of strong passwords, they remain a huge cause of security incidents and data breaches. Major technology companies are coming together to create a new standard for authentication called passkeys. These passkeys replace passwords and will be easy to implement by any company that needs to implement authentication.

On the heels of our last Digest post about malware being spread on TikTok, several US States have officially banned the app from use on government owned devicesMaryland is the most recent state to join South Dakota and Nebraska in banning TikTok. Wisconsin and South Carolina are also close to instituting bans on the social media platform. The bans only applies to government owned devices, not personal devices.

Bringing training to Slack is a simple and powerful way to update your training experience. Employees get all the benefits of a Slack experience but for training. Additionally, training is done in the context of work, making it less of a distraction and building a culture of learning.

We talk a lot about building a security mindset. But what is a security mindset and why should this be the goal of security awareness? A security mindset is a way of thinking and an approach to decision-making that prioritizes the protection of personal and organizational assets, including data and networks. Included is a simple framework to build a security mindset across your entire workforce.

The Cybersecurity and Infrastructure Security Agency (CISA) recently published guidance to help small businesses make themselves more cyber secure. Why? The reason given is that there has been an increasing number of attacks launched against small businesses.

What do you think of when you hear the word malware? 👉 Most people think of computer viruses, email attachments, or web pop ups. (The most common type of malware is a Microsoft Office Macro attached to an email.)Cyber attackers are creative and now using TikTok to target their victims.

Is Slack a trusted platform for communication? The short answer is yes. The longer answer is that you should always be skeptical of messages, and especially requests, that you get on any communication platform - Slack, Teams, email, LinkedIn, social media, etc.

I assume all of my passwords are either already in a breach and are available for sale on the dark web or that they will be in a breach at some point. Data breaches are so incredibly common and the scale of breaches so huge that there are billions of passwords available on the dark web.

What's the best way to evaluate a security awareness vendor? In a crowded market, people often harp on price as the competition drives it down. But, what is often missing is an assessment of roadmap. As tech and work changes rapidly, your security awareness vendor should change in step.

The first order problem to solve with security awareness is to improve the human behaviors that improve the overall security posture of a company.Human risk is a lagging indicator of human behavior. In order to be proactive, we have to flip the concept of human risk and focus on human behavior.

Phishing campaigns are a part of most security awareness programs. Whether companies use security awareness training and a phishing simulator from the same vendor or not, there are a few best practices we recommend for integrating phishing into your security awareness program.

Slack is the lifeblood of many modern companies. As a core part of modern work, training and LMSs should be connected to users in Slack yet most training platforms fall short of fully integrating into Slack and into the flow of work.