{"id":241080,"date":"2026-07-07T12:39:00","date_gmt":"2026-07-07T16:39:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/07\/07\/cyberheistnews-vol-16-27-how-to-your-cybersecurity-starts-at-home-on-world-social-media-day\/"},"modified":"2026-07-07T12:45:07","modified_gmt":"2026-07-07T16:45:07","slug":"cyberheistnews-vol-16-27-how-to-your-cybersecurity-starts-at-home-on-world-social-media-day","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/07\/07\/cyberheistnews-vol-16-27-how-to-your-cybersecurity-starts-at-home-on-world-social-media-day\/","title":{"rendered":"CyberheistNews Vol 16 #27 [HOW TO] Your Cybersecurity Starts at Home on World Social Media Day"},"content":{"rendered":"

CyberheistNews Vol 16 #27 [HOW TO] Your Cybersecurity Starts at Home on World Social Media Day<\/a><\/p>\n

https:\/\/blog.knowbe4.com\/cyberheistnews-vol-16-27-how-to-your-cybersecurity-starts-at-home-on-world-social-media-day<\/a><\/p>\n

Publish Date: 2026-07-07 12:39:00<\/a><\/p>\n

Source Domain: blog.knowbe4.com<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points. <\/p>\n

CyberheistNews Vol 16 #27\u00a0 | \u00a0 July 7th, 2026<\/p>\n

[HOW TO] Your Cybersecurity Starts at Home on World Social Media Day
\nBy Anna Collard
\nRemember when “social media safety” meant advising employees not to post pictures of their security badges or laptop screens?
\nBack then, corporate risk and personal scrolling felt like two entirely separate worlds. Today, that boundary has completely dissolved. Social media has become a primary staging ground for sophisticated social engineering attacks targeting your workforce and their families.
\nLast month’s World Social Media Day should serve as a reminder to recognize how the landscape has shifted, and why securing the digital workforce requires a 360-degree approach to employee safety both in the office and at home.
\nThe New Social Engineering Playbook
\nYesterday\u2019s typo-ridden phishing campaigns have evolved into highly targeted, multi-layered operations, driven by AI. Threat actors are leveraging public platforms in ways that standard corporate firewalls can’t block:<\/p>\n

OSINT and Oversharing: Seemingly innocent viral trends, like sharing a first car, a childhood pet or a high school mascot, are goldmines for open-source intelligence (OSINT). Using AI, attackers can mine this data at volume and use the details to guess security questions or craft hyper-targeted lures.
\nHyper-Personalized Spear-Phishing: Bad actors meticulously scrape LinkedIn profiles, Instagram posts and public comments made to map out corporate hierarchies and personal relationships, launching highly convincing corporate espionage or Business Email Compromise (BEC) attacks.
\nAI-Driven Deepfakes: Cybercriminals can clone voices from a short video clip posted on a public profile, creating realistic impersonation scams targeting an employee’s family or financial team.<\/p>\n

Cybersecurity Is a Lifestyle, Not a Corporate Chore
\nSecurity awareness shouldn’t stop when an employee logs off from their corporate laptop. If your team members or their families are vulnerable in their personal lives, your organization is inherently at higher risk. Building a true security culture means equipping people with digital defense skills they can use every day.
\nTo help organizations bridge the gap between workplace security and home safety, KnowBe4 developed CAPY (Cyber Awareness Program for You). CAPY is a completely free online training hub designed specifically for families and individuals. By offering resources like CAPY to your workforce, you aren’t just giving them another training module; you’re offering a benefit that protects their whole family.<\/p>\n

For Kids and Teens: It makes learning about cybersecurity fun with games and coloring books for younger children. For tweens and teens there is content on cyberbullying, AI safety and sextortion.
\nFor Adults: Training on a wide range of topics from email phishing scams and social media attacks to mobile device safety and password security, with upcoming modules planned around how to safely engage with AI.
\nFor Senior Citizens: Specialized, easy-to-follow content focusing on some of the unique threats older adults face, including grandparent scams, identity theft and imposter fraud.<\/p>\n

Honoring World Social Media Day, let\u2019s look beyond the traditional perimeter. When we empower our teams to protect their personal digital lives, we create a much more resilient corporate culture.
\nShare the Free KnowBe4 CAPY Safety Hub with your team and help them secure their digital world at home, as well as at work.
\nBlog post with links to CAPY:https:\/\/blog.knowbe4.com\/cybersecurity-starts-at-home-world-social-media-day<\/p>\n

[Last Chance] Secure Your Spot for The Workforce Security Summit
\nThe Workforce Security Summit is almost here! Don\u2019t miss your chance to see what securing both your humans and AI agents looks like in practice!
\nJoin us this Wednesday, July 8, to learn how you can evolve your security strategy for the modern threat landscape.
\nDon\u2019t miss out on these valuable insights:<\/p>\n

Look to the future of AI-native security: Join CEO Bryan Palma for a look at the future of digital workforce security and the innovation shaping what comes next
\nKnow your threat. Own your defense. Walk away confident you have the knowledge and tools to defend against the threats targeting your people and agents \u2014 deepfakes, AI-powered phishing, voice cloning and more
\nSee what\u2019s coming on the KnowBe4 Platform roadmap and get an exclusive inside look at what\u2019s next<\/p>\n

Date & Time: THIS WEEK, Wednesday, July 8 @ 1:00-3:00 PM ET
\nSave My Spot:https:\/\/www.knowbe4.com\/webinar-library\/workforce-summit-na?partnerref=CHN3<\/p>\n

Shadow AI Is Not Shadow IT With a Better Marketing Budget
\nBy Javvad Malik
\nI saw a Venn diagram on social media. One circle is Shadow IT, one circle is Shadow AI, a substantial overlap, and the implicit message is that they are effectively the same challenge.
\nThey aren\u2019t and that the assumption can lead to many problems.
\nLooking back, shadow IT was like watching a crash in slow motion. Employees using technology IT hadn’t sanctioned. Personal Dropbox accounts. Unofficial Slack workspaces. WhatsApp groups that evolved from “just a quick coordination thing” into the actual operational backbone of a team.
\nThese presented real risks of data sprawl, compliance headaches and lack of visibility into where data was. Organizations spent years building governance frameworks to deal with it.
\nBut Shadow IT, at its core, was a data location problem. The data sat somewhere it shouldn\u2019t. It was largely inert. Someone had to go and do something with it. That was the threat.
\nShadow AI is different in a way that is not subtle.
\nWhen You Stop Moving Data and Start Delegating Authority
\nConsider what happens when an employee connects an unsanctioned AI agent to their work systems.
\nIt gains persistent access, a memory of prior context and the ability to take actions. Connected to email. Connected to calendar. Connected, in many cases, to the tools they use to communicate with customers and colleagues.
\nIt has context, the relationships and the subtext buried in existing threads. It has, in most configurations that make it useful, some degree of write access. It can draft. It can send. It can schedule. It can, at the more capable end, make decisions and execute them before any human has reviewed them.
\nThis is not a data location problem. This is an authority problem. The employee has not merely stored something in an unsanctioned place. They have delegated the ability to act in their name to something nobody in IT cataloged, governed or in many cases even knows exists.
\nWhereas shadow IT could be likened to someone putting files in their own cabinet at home as opposed to the secure one in the office. Shadow AI gave itself power of attorney.
\nWhy Employees Are Doing This
\nKnowBe4’s Agentic Risks to Human Wins report confirmed that employees are turning to unsanctioned AI tools not out of malice or carelessness, but because the official alternatives are too slow, too restricted or too stripped-down to be genuinely useful.
\nThese are the same reasons which drove Shadow IT. When corporate email took 10 business days to provision, employees found their own email. When SharePoint was genuinely terrible to navigate, employees found Dropbox. When corporate messaging required a ticket and three different authentication hoops to jump through, employees found WhatsApp.
\nWhile the pattern is identical, the capability gap has widened considerably.
\nAI tools in 2026 are fast, capable, increasingly agentic and easy to connect to existing workflows. Enterprise AI tools are often none of those things. They’ve been stripped down for policy compliance, throttled for cost control or are simply months behind what’s commercially available.
\nThe employee who signs up for an unsanctioned AI assistant on a Friday afternoon is solving their own immediate needs in a way that creates everyone else’s security problem on Monday morning.
\nThe Data That’s Going In
\nOver half (51%) of cybersecurity leaders believe the use of “Shadow AI” has had a great impact on their organizations\u2019 cybersecurity over the past year. Employees are feeding AI agents internal strategy documents, client data, financial projections, HR records and legal correspondence; anything that would help the agent do a better job of whatever they’ve asked it to do.
\n[CONTINUED] At this blog post with links:https:\/\/blog.knowbe4.com\/shadow-ai-is-not-shadow-it-authority-problem<\/p>\n

Get Your Ransomware Resource Kit
\nRansomware remains one of the most persistent threats to infosec professionals.
\nWhat\u2019s more, it has changed shape. The force transforming it is artificial intelligence (AI), which has made attacks faster and cheaper. Even more alarming, AI has removed the skill floor for attackers. Campaigns that once demanded genuine technical expertise now require only a subscription.
\nLastly, strong backups, once considered the ultimate insurance policy against ransomware, are no longer enough on their own. The threat has shifted from “we locked your systems” to “we have your data.” No restore process can fix the latter.
\nDownload our Ransomware Resource Kit for free resources discussing the latest trends in ransomware and how to keep your organization and users secure.
\nYou get:<\/p>\n

Access to our free on-demand webinar Agentic AI Ransomware: What You Need to Know, featuring KnowBe4 CISO Advisor Roger Grimes
\nOur The New Face of Ransomware: How AI and Exfiltration Are Mutating the Threat Landscape whitepaper
\nOur How Polymorphic Malware is Outsmarting Your Email Security whitepaper
\nAccess to our free RanSim Ransomware Simulator, which tests effectiveness of your existing endpoint protection using twenty-four simulated ransomware infection scenarios and one simulated cryptomining infection.
\nRansomware insights from our Lead CISO Advisor Javvad Malik<\/p>\n

Download Now:https:\/\/info.knowbe4.com\/ransomware-resilience-kit?utm_source=chn_email&utm_medium=email&utm_campaign=dg-sat-campaign-26&utm_term=5759&utm_content=ransomware-month-kit<\/p>\n

Why Bite-Sized Security Awareness Training Matters in an Age of TikTok and Digital Distraction
\nBy Anna Collard
\nIn cybersecurity, attention has become one of our most valuable resources. Modern digital habits have fundamentally changed how we consume information, giving rise to “TikTok Brain.” An environment of constant notifications, endless content streams and competing demands on our focus, has changed how we consume information and, more importantly, how we make decisions.
\nThreat actors understand this shift perfectly. Whether it\u2019s a phishing email, a convincing deepfake or an urgent text message, most social engineering attacks are designed to bypass careful thinking and trigger an immediate reaction. They exploit distraction, time pressure, emotional responses and our tendency to operate on autopilot.
\nIf bad actors are hitting your users with fast, high-impact manipulation tailored to today’s shorter attention spans, why are so many organizations still trying to counter modern cyber threats with dry, hour-long annual compliance training?
\nOur security awareness efforts should do more than simply transfer information. They should help people develop the awareness to recognize when they need to slow down, pause and think critically.
\nThe human mind just is not wired to retain a massive dump of security rules delivered once a year, especially in an era of constant digital distraction. Research on learning and behavior change suggests that knowledge delivered in small, relevant and repeated moments is often more likely to be remembered and applied when it matters. That means shifting away from marathon training sessions and towards agile, bite-sized learning.
\nThe Power of Microlearning
\nMicrolearning takes complex security concepts and slices them into highly focused, engaging modules that users can absorb in minutes. By keeping modules brief and interactive, you avoid user fatigue and build continuous awareness. Instead of treating security as a checkbox exercise, microlearning aligns with modern consumption habits to make safety an everyday reflex.
\nShort, focused learning moments can reinforce key concepts without overwhelming users. Rather than treating security as a once-a-year event, organizations can create a steady rhythm of reminders, simulations, nudges and practical exercises that keep security top of mind.
\nHowever, the goal is not simply to cater to shrinking attention spans. The goal is to help people strengthen their ability to focus on what matters, recognize manipulation attempts and make deliberate decisions when faced with uncertainty or pressure.
\nTo help organizations maintain this continuous engagement without disrupting the workday, KnowBe4 offers a vast library of short, impactful content tailored to these shorter attention spans. For instance, teams can dive into modern threats with the “Cyber Essentials – Deepfakes” bite-sized training module, learn to recognize synthetic media using the quick video “AI Unveiled: Spot the Fake” or play games such as “Sir Hackalot: Royal Ravens” and “Spot the Phish.”
\nThese brief interventions fit naturally into the workday while reinforcing secure habits over time.
\nChanging Culture, Minutes at a Time
\nBuilding a strong culture of defense is not about forcing your employees to become security experts. It is about helping them make the right choice when they are busy, tired or caught off guard.
\nBy dropping short, relevant learning moments into their regular routine, you keep security top of mind without causing disruption. The strongest security cultures are built through small, consistent interventions that encourage awareness, reflection and deliberate action. When employees learn to notice urgency, question unexpected requests and create a moment of pause before responding, they become more resilient to manipulation.
\nIn an age of digital distraction, the goal is not just shorter training. It is helping people reclaim their attention and use it wisely.
\nBlog post with links:https:\/\/blog.knowbe4.com\/bite-sized-security-training-digital-distraction<\/p>\n

Custom Security Training in Minutes, Not Months
\nBuilding custom content used to mean big budgets and weeks of production time, but AI-driven threats don’t wait. Your training shouldn’t either.
\nWatch this demo to see how KnowBe4’s AI agents deliver tailored content that meets your organization’s exact needs, at speed. From generating custom training from your own policies to simulating deepfakes of your own executives, see what’s now possible in minutes.
\nWhat you\u2019ll see in this demo:<\/p>\n

Content Creation Agent: Turn simple text prompts or internal documents into custom, interactive training modules and quizzes, no instructional design team required.
\nDeepfake Training Content Agent: Safely simulate hyper-realistic executive impersonations, giving your workforce the hands-on experience needed to spot next-gen social engineering tactics before they become a costly mistake.
\nStudio-Quality AI Videos at Scale, Powered by Synthesia: Generate professional video training modules with realistic AI avatars and seamless localization across 130+ languages \u2014 no production budget required.<\/p>\n

The threats targeting your organization are custom-built. Your training should be too. Watch now to see how KnowBe4 puts the power of custom, relevant security awareness training directly in your hands.
\nWatch Now:https:\/\/info.knowbe4.com\/kmsat-demo-3?partnerref=CHN
\nLet’s stay safe out there.
\nWarm regards,Stu Sjouwerman, SACPExecutive ChairmanKnowBe4, Inc.
\nPS: Kevin Mitnick left the man who helped jail him enough money to buy a Porsche 911:https:\/\/boingboing.net\/2026\/06\/24\/kevin-mitnick-left-the-man-who-helped-jail-him-enough-for-a-porsche-911.html
\nPPS: Happy 3rd Birthday to Our KnowBe4 Community! We now have over 30,000 members:https:\/\/blog.knowbe4.com\/happy-3rd-birthday-to-our-knowbe4-community<\/p>\n

Quotes of the Week \u00a0<\/p>\n

“Hear the other side.”- Augustine of Hippo – Philosopher (354 – 430)<\/p>\n

“We are not human beings having a spiritual experience. We are spiritual beings having a human experience.”- Pierre Teilhard de Chardin – Philosopher (1881 – 1955)<\/p>\n

Thanks for reading CyberheistNews
\nYou can read CyberheistNews online at our Bloghttps:\/\/blog.knowbe4.com\/cyberheistnews-vol-16-27-how-to-your-cybersecurity-starts-at-home-on-world-social-media-day<\/p>\n

Security News <\/p>\n

Clickfix Social Engineering Is Now the Leading Malware Delivery Method
\nThe ClickFix social engineering technique is now the top malware delivery method, according to a new report from ReliaQuest. These attacks trick users into copying a malicious command, then pasting it into a terminal and running it on their computers.
\n“ClickFix remained the dominant delivery method this period and, for the first time, we observed it expand to macOS, delivering infostealers onto a platform many organizations still monitor less closely than Windows,” the researchers write. “This means ClickFix can no longer be handled as a special case.
\n“Training, detection and triage for it should run continuously on both Windows and macOS.” ReliaQuest notes that AI tools are enabling threat actors to scale social engineering attacks with very little added effort.
\n“Adversaries leaned on two strategies: social engineering at scale and attacks on unpatched, internet-facing infrastructure,” the researchers write. “The leading technique ‘ClickFix’ drove the first, shifting delivery from compromised websites to emailed links, while ‘Qilin,’ the period\u2019s most active ransomware operator, continued exploiting unpatched edge devices for mass extortion.
\n“What\u2019s more, AI is making social engineering faster, cheaper and more convincing, accelerating familiar techniques rather than creating new ones.”
\nOrganizations should ensure that their security awareness programs train employees to recognize ClickFix tactics. “Train users not to paste commands into Run, Terminal or Script Editor, and simulate ClickFix-style lures on Windows and macOS (like CAPTCHA and verification prompts, ‘paste this to continue’ clipboard steps and browser-to-shell hand-offs),” the researchers write.
\nAI-native security awareness training gives your organization an essential layer of defense against evolving social engineering attacks. KnowBe4 empowers your workforce to make smarter security decisions every day.
\nReliaQuest has the story:https:\/\/reliaquest.com\/blog\/threat-spotlight-whats-trending-top-cyber-attacker-techniques-march-may-2026<\/p>\n

Threat Actor Uses Phishing to Breach Organizations for Ransomware Gangs
\nAn initial access broker associated with the Payouts King ransomware group is using Microsoft Teams phishing to deploy a malicious Microsoft Edge web browser extension, according to researchers at Zscaler.
\nOnce the hackers have a foothold within an organization, they sell the access to the ransomware gang to conduct follow-on attacks.
\n“In recent attacks, the threat actor leverages social engineering tactics paired with an innovative malware delivery mechanism,” the researchers write. “The technique utilizes a malicious Microsoft Edge browser extension that exploits the Chrome native messaging protocol to interact with host-native applications beyond the confines of the browser sandbox.
\n“By abusing this interface, the attackers gain direct host access, enabling them to manipulate the local filesystem, launch processes and execute arbitrary code on the compromised host.”
\nThe attackers begin by sending the victim a Teams message that impersonates the organization\u2019s IT staff, telling the user that they need a spam filter update. The user is sent to a fake Microsoft website with a series of buttons designed to install the malware, eventually requesting the victim\u2019s Microsoft365\/Outlook password.
\n“As threat actors like those affiliated with Payouts King continue to leverage social engineering, such as spam bombing and vishing, in tandem with innovative delivery mechanisms, organizations must adopt a defense-in-depth posture,” Zscaler says.
\n“This includes robust monitoring of browser extension installations, strict control over native messaging host configurations and comprehensive user training to recognize and report suspicious prompts, especially when they mimic legitimate IT administrative updates or management consoles.”
\nZscaler has the story:https:\/\/www.zscaler.com\/blogs\/security-research\/payouts-king-ransomware-initial-access-broker-deploys-new-edgecution<\/p>\n

What KnowBe4 Customers Say
\n“I would like to take a moment to recognize Hayden B., who has served as the Customer Success Manager supporting us throughout our engagement.
\n“Over the course of our partnership, Hayden consistently demonstrated exceptional professionalism, responsiveness and dedication. She was always available to answer questions, provide thoughtful guidance and ensure we had the support needed to maximize the value of the KnowBe4 platform.
\n“In addition to her deep knowledge and expertise, Hayden was proactive in offering recommendations, following up on open items, and helping us navigate challenges as they arose. Her commitment to customer success made a meaningful difference in our overall experience and contributed significantly to the success of our Security Awareness Program.
\n“I wanted to ensure this positive feedback was shared, as Hayden’s support and partnership have been greatly appreciated. She is a tremendous asset to the KnowBe4 organization and has consistently added value to every interaction.
\n“Her dedication to customer success reflects positively on the entire KnowBe4 team! Please extend our sincere thanks and appreciation to Hayden for her outstanding support over the years.”
\n– N.A., Director, IT Security<\/p>\n

Interesting News Items This Week <\/p>\n

Cyberheist ‘Fave’ Links <\/p>\n

This Week’s Links We Like, Tips, Hints and Fun Stuff<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

CyberheistNews Vol 16 #27 [HOW TO] Your Cybersecurity Starts at Home on World Social Media…<\/p>\n","protected":false},"author":1,"featured_media":241081,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blog.knowbe4.com\/hubfs\/CHNNewsletter_Thumbnail.png","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,20,30,24,31,32,25,34],"class_list":["post-241080","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-artificial-intelligence","tag-breach","tag-cybersecurity","tag-exploit","tag-malware","tag-phishing","tag-threat-actor"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/241080"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=241080"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/241080\/revisions"}],"predecessor-version":[{"id":241082,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/241080\/revisions\/241082"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/241081"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=241080"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=241080"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=241080"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}