Simulated vishing capabilities have been launched by KnowBe4 to help organizations address the growing threat of voice-based social engineering attacks. The digital workforce security firm announced the new feature on August 3, 2026, targeting the phone channel as a critical vulnerability. This update integrates voice-based threat simulations directly into the company’s existing security training platform.
According to recent industry data, voice-based attacks are rising rapidly. CrowdStrike reported a 442% surge in vishing activity between the first and second halves of 2024. Furthermore, Mandiant ranked voice phishing among the top initial infection vectors for organizations. The 2026 Verizon Data Breach Investigations Report also indicated that employees are 40% more likely to fall for phone-based simulation tests compared to traditional email phishing.
Rising Threat of Voice Phishing
The new simulated vishing tool allows security teams to train employees using realistic scenarios. These scenarios use local caller ID, realistic personas, and multi-step customizable scripts to mimic actual attacker tactics. By practicing in a safe environment, employees learn to recognize high-pressure phone tactics before encountering real threats.
Integrating Simulated Vishing into Security Workflows
The simulated vishing results feed directly into the reporting and risk visibility systems that organizations already use. This data influences the overall Risk Score, which provides a unified view of human and digital risk across multiple communication channels. Security leaders can use these metrics to track susceptibility and measure training effectiveness over time.
Addressing AI Voice Cloning
“An urgent phone call from someone pretending to be your IT department or a C-level executive creates instant pressure, and cybercriminals are using AI voice cloning to make these calls unbelievably convincing. To build true organizational resilience, security teams can no longer focus solely on the inbox.”
Greg Kras, Chief Product Officer, KnowBe4
Kras stated that organizations breached recently were not tricked by generic scripts, but by patient, adaptive conversations. Training employees against realistic threats is essential for preparing them for actual attacks. The platform aims to protect both human employees and digital agents from these sophisticated social engineering tactics.
Future Outlook for Digital Defense
As organizations adopt more digital tools, securing communication channels beyond email becomes vital. The integration of voice simulation helps close a significant gap in modern cybersecurity strategies. By combining email, collaboration, and voice training, companies can build a more complete defense against evolving social engineering methods.
This development aligns with the growing need for advanced education and training in digital defense. Organizations can view demonstrations of the new capabilities at upcoming industry events, including the Black Hat conference, where the company will showcase the technology.
