Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

[New Threat Trend Data] When Bad Actors Use Reality Against Us

Oct 29, 2026 By KnowBe4 Team In KnowBe4
“Is it real?” has become a common question across our digital lives thanks to the rise of AI-generated content. A fair one, with deepfakes and AI-produced imagery flooding nearly every channel we use daily. A skeptical eye is a must, but our most recent Phishing Threat Trends Report reveals why that might not even be enough.
Read Post
Why Emulators Fail Device Checks: What Security Teams Should Know

Why Emulators Fail Device Checks: What Security Teams Should Know

Oct 29, 2026 By SecuritySenses In SecuritySenses
For anti-fraud systems, the device can become a trust signal before a login, payment, or other sensitive action takes place. Google says apps using Play Integrity features see 80% lower unauthorised usage on average than other apps, which helps explain why device checks have moved well beyond simple emulator detection. An emulator does not fail because of one obvious property. Modern integrity systems look at several layers at once, including signals tied to hardware-backed trust that a standard emulator cannot reproduce in the same way as a genuine certified Android device.
Read Post
memcyco

How a Vishing Attack Really Works - And Where Your Brand Gets Exposed

Oct 28, 2026 By Ezra M. In Memcyco
Voice-based fraud now accounts for billions in annual losses, and the FBI has flagged AI-assisted voice fraud as one of the fastest-growing financial crime vectors in the country. Your email security didn’t catch it. Your DMARC configuration didn’t fire. Neither did your anti-phishing stack. That’s not a gap in your tools. It’s a gap in your threat model. How does vishing work?
Read Post
manageengine

ClickFix: How a fake CAPTCHA becomes a malware delivery mechanism

Oct 27, 2026 By Judin Joan Soundarya In ManageEngine
CAPTCHAs are designed to distinguish humans from automated systems. A user types distorted letters or clicks a few crosswalks, and in doing so proves there is a human behind the keyboard rather than a script. The whole idea rests on one assumption: A human, unlike a bot, will pause and think for a moment before acting. ClickFix takes that assumption and turns it into the attack itself. The fake verification screen does not ask the user to prove they are human by thinking.
Read Post
Staying Private and Safe on Random Chat Sites

Staying Private and Safe on Random Chat Sites

Oct 26, 2026 By SecuritySenses In SecuritySenses
Talking to a stranger online has a pull that social media lost long ago. There is no feed and no follower count, just a new person and an empty chat box. That openness is also the risk. When you know nothing about the person on the other side, ideally they know nothing about you either, and keeping it that way is most of what staying safe comes down to.
Read Post
knowbe4

Warning: Attackers Are Using Calendar Invite Files to Evade Security Filters

Oct 23, 2026 By KnowBe4 Team In KnowBe4
Phishing attacks are increasingly using legitimate calendar invites to bypass security filters, according to researchers at Netcraft. Attackers send ICS calendar invite files that plant phishing lures directly on users’ calendars, often under the guise of work-related meetings.
Read Post
manageengine

5 AI scams that look legitimate in 2026 and the clues most people miss

Oct 22, 2026 By Priyanka Gs In ManageEngine
Top Tips is a weekly column where we explore practical ways to make technology work better for you. From improving productivity and strengthening digital security to discovering smarter ways to use everyday tools, we share simple, actionable insights to help you navigate the ever-evolving world of technology with confidence. AI is making online scams harder to recognize. From fake government announcements to convincing video calls, fraudsters are using synthetic content to exploit trust.
Read Post
knowbe4

Job Seekers Who Use AI for Applications Need to be on the Lookout for Scams

Oct 22, 2026 By KnowBe4 Team In KnowBe4
Researchers at Malwarebytes warn that job seekers are increasingly vulnerable to scams as AI enables them to take a “spray-and-pray” approach to job applications. Users who have automated their job application process are more likely to forget where they’ve applied, and an unsolicited message from a recruiter may seem more plausible. Job seekers can also be more willing to overlook or ignore red flags associated with scams, since they’re anxious to avoid missing an opportunity.
Read Post
knowbe4

Report: 9 out of 10 Americans Have Been Targeted by Scams

Oct 15, 2026 By KnowBe4 Team In KnowBe4
91% of Americans have been targeted by a scam, and 17% have fallen victim to one, according to a new survey by Consumer Reports. Notably, 20% of respondents said the latest scam they encountered was personalized, indicating that attackers are increasingly using automation and public or leaked information to craft targeted phishing attacks.
Read Post
memcyco

iGaming Fraud Detection: How to Identify Risk Before Player Accounts Are Compromised

Oct 14, 2026 By Julian Agudelo In Memcyco
iGaming fraud detection already spans much of the player journey, from registration and identity verification to login, payments and account activity. But for phishing-driven account takeover (ATO), an important part of the risk can develop before suspicious activity appears inside the operator environment. That distinction matters as operators try to improve fraud detection without adding unnecessary friction.
Read Post
knowbe4

Extortion Groups are Impersonating Help Desks to Gain Initial Access

Oct 13, 2026 By KnowBe4 Team In KnowBe4
Researchers at ReliaQuest have observed a surge in voice phishing (vishing) and Microsoft Teams phishing over the past several months, particularly from extortion groups like ShinyHunters. “Attackers overwhelmingly targeted users and their unmanaged devices to gain access to accounts,” the researchers write.
Read Post
Identifying Candidate Fraud in Remote Hiring: 10 Red Flags HR Teams Should Know

Identifying Candidate Fraud in Remote Hiring: 10 Red Flags HR Teams Should Know

Oct 13, 2026 By SecuritySenses In SecuritySenses
The rise of remote work and generative AI has triggered a sharp increase in sophisticated recruitment scams. HR teams now face a landscape where identifying candidate fraud is a complex challenge, as fraudsters use deepfakes and stolen identities to bypass traditional screening methods. Implementing robust recruitment and HR services is essential to mitigate these risks effectively.
Read Post
knowbe4

Warning: Attackers Are Tricking Employees Into Sharing Malicious Calendar Invites

Oct 7, 2026 By KnowBe4 Team In KnowBe4
Researchers at Fortra are tracking a new variant of calendar phishing in which threat actors trick employees into sharing meeting links internally. The attackers pose as prospective customers and contact non-sales employees, asking to be directed to a sales representative in order to discuss a business opportunity. The attacker then sends the employee a meeting link to forward to a sales contact. The attack takes place as follows.
Read Post
knowbe4

The Price of a Deal: How Scammers are Hijacking Amazon Prime Day

Oct 6, 2026 By KnowBe4 Threat Lab In KnowBe4
As millions of shoppers prepare their wishlists and await discounts for Amazon’s Prime Big Deal Days starting October 6, cybercriminals are gearing up for their own payday. In the weeks leading up to major shopping events, Amazon impersonation campaigns reach an annual peak.
Read Post

Why academic selfie fraud benchmarks fail in the real world

Oct 2, 2026 By Persona In Persona
Academic deepfake datasets rarely static: generate an image, label it real or fake, done. Real-world fraud doesn't hold still. Zhaofeng Si, a PhD student at University at Buffalo and research scientist intern at Persona, breaks down the gap. Public academic datasets are mostly typical face swaps and diffusion-model-generated images with a fixed label. In the real world, there's an attack-and-defense loop. Fraudsters actively probe for ways to bypass detection, so defenses have to keep adapting instead of training against a static benchmark.
View Video
memcyco

PoSA v1.11: Turning Fragmented Attack Signals Into Actionable Risk

Oct 1, 2026 By Arthur Zavalkovsky In Memcyco
With PoSA v1.11, we focused on a practical problem: detecting more attack activity does not necessarily help fraud and security teams make better decisions. PoSA already identifies activity across digital impersonation, credential theft, attacker devices and account access. The challenge is making the connections between that activity easier to understand, identifying which users and devices require attention, and making that intelligence available to the systems and teams responsible for responding.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.