Eskenzi PR ad banner Eskenzi PR ad banner
  • About Us
Saturday, 27 June, 2026
IT Security Guru
Eskenzi PR banner
  • Home
  • Features
  • Insight
  • Channel News
  • Events
    • Most Inspiring Women in Cyber 2026
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Channel News
  • Events
    • Most Inspiring Women in Cyber 2026
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
IT Security Guru
No Result
View All Result

KnowBe4 Launches Complimentary Training Module Following Thwarted North Korean Infiltration Attempt

New KnowBe4 training addresses critical security risks in hiring processes, sharing insights for other organizations to learn the pitfalls and avoid mistakenly hiring hackers

by The Gurus
October 22, 2024
in News
Share on FacebookShare on Twitter

Today, KnowBe4, security awareness training and simulated phishing platform provider have announced the release of a complimentary cybersecurity module aimed at enhancing organizational safety during the hiring and onboarding process.

This initiative comes on the heels of KnowBe4’s recent experience in preventing a sophisticated infiltration attempt by a North Korean hacker during the hiring process. Unlike many organizations that have unknowingly hired nation-state IT workers, KnowBe4’s security team detected and neutralized the threat within just 25 minutes, ensuring no illegal access was gained, and no data was lost, compromised, or exfiltrated on any KnowBe4 systems. In light of this incident and reports of similar successful infiltrations at other companies, KnowBe4 conducted a thorough evaluation of the hiring process, identifying critical vulnerabilities that state-sponsored actors attempt to exploit. The resulting free module addresses these key points, revamping traditional approaches to recruitment security.

This module addresses critical security risks in employee onboarding process and features an in-depth interview with KnowBe4 staff members who recount their real-life experience in uncovering a bad actor, working for a nation-state government, who was disguised as a new hire during the onboarding process. The module details KnowBe4’s quick response to secure the network and subsequent efforts to educate others on this attempted attack and how it was stopped.

The new Secure Hiring and Onboarding module is designed to help organizations mitigate risks associated with the hiring process. It equips HR professionals, IT professionals, hiring managers and others involved in the recruitment process with the knowledge needed to identify and manage security threats that can arise during recruitment and onboarding.

By completing this module, participants will be able to:

  • Raise awareness about hiring-based security threats
  • Gain practical knowledge for identifying risks
  • Improve organizational hiring security practices

“In recent years, there has been a disturbing trend of state-sponsored hackers, particularly from North Korea, attempting to infiltrate organizations by exploiting the hiring process,” said John Just, chief learning officer at KnowBe4. “At KnowBe4, we experienced this firsthand and successfully prevented such an attempt. This module is born from that experience, turning our real-world encounter into actionable knowledge. By focusing on the hiring process, we are helping organizations strengthen their defenses at a critical point of vulnerability. We are now offering this training at no cost, empowering companies to detect and manage these sophisticated infiltration attempts from the very first interaction with potential hires. It is about transforming every step of the recruitment process into an opportunity to enhance organizational security.”

Tags: Cybercyber trainingPhishingtech
ShareTweet
Previous Post

Keeper Security Calls for Action: Week Four

Next Post

How Safe Are Your Online Finances?

Recent News

Keeper Security launches Microsoft Teams integration for privileged access management

Keeper Security launches Microsoft Teams integration for privileged access management

June 26, 2026
UK Museums Are a Cyber Incident Waiting to Happen and the Government Knows It

UK Museums Are a Cyber Incident Waiting to Happen and the Government Knows It

June 25, 2026
pqc

New Forescout Data Reveals Slow Progress Toward Quantum-Safe Security

June 24, 2026
AI-Powered Phishing Attacks Surge 1,380% as Criminal Platforms Render MFA Obsolete

AI-Powered Phishing Attacks Surge 1,380% as Criminal Platforms Render MFA Obsolete

June 24, 2026

The IT Security Guru offers a daily news digest of all the best breaking IT security news stories first thing in the morning! Rather than you having to trawl through all the news feeds to find out what’s cooking, you can quickly get everything you need from this site!

Our Address: 10 London Mews, London, W2 1HY

Follow Us

© 2015 - 2024 IT Security Guru - Website Managed by Dessol

  • About Us
Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
No Result
View All Result
  • Home
  • Features
  • Insight
  • Channel News
  • Events
    • Most Inspiring Women in Cyber 2026
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us

© 2015 - 2024 IT Security Guru - Website Managed by Dessol