Still Running Last Year's Phishing Simulations While Attackers Moved On Six Months Ago?

That's usually how human risk builds quietly. Your team can't learn from threats they don't see modeled, and attackers don't wait for your training calendar to catch up.

The gap widens every month. Regional offices receive generic notifications in English. Learners disengage when modules feel irrelevant or outdated. Meanwhile, MFA fatigue attacks, shadow AI risks, and deepfake social engineering evolve faster than quarterly training refreshes.

If your security awareness program feels like it's always six months behind, you're watching risk accumulate in the one place technology alone can't fix.

Why This Matters Now

Threat actors have industrialized their methods. Phishing templates update weekly. Deepfakes are commoditized. Session hijacking tools are sold as subscriptions. Your learners face tactics today that weren't part of last year's training library.

At the same time, workforces have globalized faster than training infrastructure. A single security awareness campaign now needs to reach employees across fifty countries, twenty languages, and three different compliance frameworks. Manual localization doesn't scale. Generic English-only rollouts get ignored.

The result is predictable. Completion rates drop. Phishing click rates stay flat. Security leaders report training fatigue while actual risk exposure grows. The problem isn't learner apathy. It's content that no longer reflects what attackers are actually doing.

KnowBe4 has updated its Security Awareness Training platform to address this mismatch. New modules cover deepfake scenarios, shadow AI risks, and session hijacking. Localized delivery features enable multilingual rollouts without rebuilding campaigns. The focus is on closing the gap between what learners see in training and what lands in their inbox the next day.

Three Strategic Gaps Exposed

Localization Becomes a Blocker

Global rollouts stall when training content exists only in English. Regional offices delay campaigns while waiting for translations. Learners receive notifications they can't read. Completion metrics fragment across geographies.

• Training campaigns require separate builds for each language group
• Notification emails default to English regardless of learner location
• Regional compliance deadlines arrive before localized content is ready
• Security awareness managers spend more time on logistics than strategy

Simulations Lag Behind Real Attacks

Phishing simulations that worked last year become recognizable. Learners develop pattern recognition for outdated templates. Meanwhile, attackers have moved to voice cloning, credential harvesting via fake MFA prompts, and AI-generated spear phishing.

• Training libraries don't include scenarios for emerging tactics
• Deepfake and shadow AI risks remain abstract concepts rather than practiced responses
• Learners pass simulations but fail when facing real attacks that look different
• Click rates plateau because simulations no longer mirror actual threat behavior

Content Personalization Stays Manual

Different roles face different risks, but most platforms deliver one-size-fits-all training. Executives need deepfake awareness. Finance teams need wire fraud scenarios. IT staff need shadow AI guidance. Building separate tracks manually doesn't scale.

• Role-specific threats get buried in generic modules
• High-risk personas receive the same content as low-risk users
• Custom scenario creation requires design skills most teams lack
• Training feels irrelevant when it doesn't match daily risk exposure

The Strategic Shift Required

Effective security awareness training now requires three capabilities that weren't standard two years ago. First, content must update as frequently as threat intelligence feeds. Second, delivery must adapt to learner language and role without manual intervention. Third, scenarios must model emerging tactics before they become widespread.

This shifts security awareness from an annual compliance exercise to an operational discipline. Training becomes a feedback loop. New attack patterns inform new modules. Learner performance data reveals which tactics need reinforcement. Regional managers see completion and risk metrics in real time.

The goal isn't more training. It's training that reflects what attackers are actually doing right now, delivered in a way that fits how global workforces actually operate.

• Automate localization so regional rollouts don't require separate builds
• Refresh phishing templates and threat scenarios monthly, not annually
• Map training content to role-specific risks using personas and custom scenarios
• Integrate with existing learning platforms to reduce admin overhead

How Security Awareness Training (US Leads) Addresses This

KnowBe4's September 2026 updates focus on three areas: localized delivery, expanded threat modeling, and role-based customization.

• Localization Becomes a Blocker: AI Translations, launching October 5, automatically creates training content in over 50 languages. Localized Training Notifications send emails in each learner's preferred language based on profile settings. This eliminates manual translation workflows and improves completion rates across distributed teams.
• Simulations Lag Behind Real Attacks: New modules cover deepfake awareness, shadow AI risks, MFA fatigue attacks, and session hijacking. The Deepfake Training Content Agent allows administrators to build custom scenarios using persona libraries. Content updates reflect current threat patterns rather than outdated templates.
• Content Personalization Stays Manual: The Persona Library enables role-specific training without rebuilding campaigns. Scenarios can be tailored to executives, finance teams, or IT staff. Integration with Workday Learning and other platforms reduces administrative friction for global rollouts.

Who This Is For

• Security awareness managers running programs across multiple regions and languages
• IT managers responsible for reducing phishing click rates and human-risk exposure
• Compliance managers who need consistent training delivery across global offices
• HR managers coordinating onboarding and ongoing security education for distributed teams

See how KnowBe4 can help your team stay current with localized, threat-informed security awareness training. Visit https://knowbe4.optrics.com/lp/knowbe4-sat-us.html

FAQ

How does AI Translations work with existing training content?
AI Translations processes KnowBe4's training library and generates localized versions in over 50 languages. Administrators select target languages, and the platform creates translated modules automatically. This eliminates the need to rebuild campaigns for each region.

What makes deepfake training different from standard phishing simulations?
Deepfake training uses the Persona Library to model scenarios where attackers impersonate executives or colleagues using AI-generated voice or video. Learners practice identifying inconsistencies and verifying requests through alternate channels. This prepares teams for social engineering tactics that go beyond email.

Can security awareness training integrate with our existing learning management system?
Yes. KnowBe4 integrates with platforms including Workday Learning. This allows training assignments, completions, and performance data to flow into existing HR and compliance systems without requiring learners to access a separate platform.

How often does KnowBe4 update its threat content?
KnowBe4 refreshes its training library regularly to reflect current attack patterns. Recent updates include modules on MFA fatigue, shadow AI, and session hijacking. The platform's content calendar aligns with emerging threat intelligence rather than fixed annual schedules.