Hoxhunt blog

Subscribe to our newsletter to get notified on the latest blog posts and more!

See all blog posts

Featured

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

November 7, 2023

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

Fortune 500 energy company, AES was recognized at the 2023 CSO50 awards for their security awareness training program’s transformative effect on phishing resilience, behavior and culture change, and human risk management. Watch their video playbook and learn practical tips for building your own outstanding program. It was done under the supervision of their CISO, Ryan Boulais and David Badanes, Director of Cybersecurity Strategic Initiatives.

Author image

Eliot Baker

Director of Content Marketing

Read the article

Latest articles

Threat feed week 49: eBay, Microsoft, SAP, McAfee, QuickBooks, and telecom impersonations

December 8, 2023

Threat feed week 49: eBay, Microsoft, SAP, McAfee, QuickBooks, and telecom impersonations

Threat feed week 48: Netflix, DocuSign, Microsoft Planner, QuickBooks, McAfee, Polygon, Avalanche, Danske Bank, plus other postal, banking, and crypto phishes

December 1, 2023

Threat feed week 48: Netflix, DocuSign, Microsoft Planner, QuickBooks, McAfee, Polygon, Avalanche, Danske Bank, plus other postal, banking, and crypto phishes

Threat feed week 47: Black Friday, cash awards, donations, and impersonations, including Adobe, the US Treasury Department, Meta Support, Facebook Ads, Microsoft, and more

November 24, 2023

Threat feed week 47: Black Friday, cash awards, donations, and impersonations, including Adobe, the US Treasury Department, Meta Support, Facebook Ads, Microsoft, and more

Threat feed week 46: Microsoft, QuickBooks, Outlook, Chase Bank impersonations, QR codes, and crypto phishing emails

November 17, 2023

Threat feed week 46: Microsoft, QuickBooks, Outlook, Chase Bank impersonations, QR codes, and crypto phishing emails

Hoxhunt cracks 2023 Deloitte Fast 50

November 16, 2023

Hoxhunt cracks 2023 Deloitte Fast 50

Threat feed week 45: Facebook, Google Forms, Verizon, Zoom, McAfee, Sharebox, Outlook, QuickBooks, HR, law firms, and telecommunications impersonations

November 10, 2023

Threat feed week 45: Facebook, Google Forms, Verizon, Zoom, McAfee, Sharebox, Outlook, QuickBooks, HR, law firms, and telecommunications impersonations

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

November 7, 2023

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

Threat feed week 44: Microsoft, DocuSign, McAfee, cryptocurrency, debt collections, postal service, telecommunication, banking, insurance, and police impersonations

November 3, 2023

Threat feed week 44: Microsoft, DocuSign, McAfee, cryptocurrency, debt collections, postal service, telecommunication, banking, insurance, and police impersonations

Threat feed week 43: DocuSign, Microsoft, QuickBooks, DHL, Geek Squad, MetaMask, Luxembourg police, and German postal service impersonations

October 27, 2023

Threat feed week 43: DocuSign, Microsoft, QuickBooks, DHL, Geek Squad, MetaMask, Luxembourg police, and German postal service impersonations

Hoxhunt Available Through GuidePoint Security as Demand for Security Behavior Change Accelerates

October 23, 2023

Hoxhunt Available Through GuidePoint Security as Demand for Security Behavior Change Accelerates

Threat feed week 42: PayPal, Outlook, Microsoft, DocuSign, McAfee, Santander, other impersonations, and Bitcoin extortion

October 20, 2023

Threat feed week 42: PayPal, Outlook, Microsoft, DocuSign, McAfee, Santander, other impersonations, and Bitcoin extortion

Don’t scan! Insights from the Hoxhunt cybersecurity human risk benchmark challenge

October 19, 2023

Don’t scan! Insights from the Hoxhunt cybersecurity human risk benchmark challenge

Ira Winkler: "Cancel phishing training? Good luck with that!"

Ira Winkler: "Cancel phishing training? Good luck with that!"

Lisa Kubicki from DocuSign on changing behavior with the Hoxhunt Human Risk Management Platform

Lisa Kubicki from DocuSign on changing behavior with the Hoxhunt Human Risk Management Platform

A real approach to implementing machine learning to security awareness, by Ira Winkler

A real approach to implementing machine learning to security awareness, by Ira Winkler

Radical Reporting author, Sara James discusses cybersecurity communication: Video and Q&A

Radical Reporting author, Sara James discusses cybersecurity communication: Video and Q&A

CISO Executive Primer with Bill Bonney, Gary Hayslip, and Matt Stamper

CISO Executive Primer with Bill Bonney, Gary Hayslip, and Matt Stamper

Key takeaways from CISO Sandbox with Lisa Kubicki, DocuSign

Key takeaways from CISO Sandbox with Lisa Kubicki, DocuSign

George Finney joins the CISO Sandbox: Video and key takeaways

George Finney joins the CISO Sandbox: Video and key takeaways

CISO Sandbox with Dan Lohrmann: Video and key takeaways

February 3, 2022

CISO Sandbox with Dan Lohrmann: Video and key takeaways

Mastering Cybersecurity Risk Management, with David X Martin

November 17, 2021

Mastering Cybersecurity Risk Management, with David X Martin

Key Takeaways From Hoxhunt Webinar with Dr. Rebecca Wynn

October 28, 2021

Key Takeaways From Hoxhunt Webinar with Dr. Rebecca Wynn

Hoxhunt cracks 2023 Deloitte Fast 50

November 16, 2023

Hoxhunt cracks 2023 Deloitte Fast 50

Hoxhunt Available Through GuidePoint Security as Demand for Security Behavior Change Accelerates

October 23, 2023

Hoxhunt Available Through GuidePoint Security as Demand for Security Behavior Change Accelerates

Hoxhunt Bolsters Partnership Strategy to Bring Leading Cybersecurity Behavior Change Technology to the UK

August 29, 2023

Hoxhunt Bolsters Partnership Strategy to Bring Leading Cybersecurity Behavior Change Technology to the UK

AES wins CSO50 award for transformative security behavior change with Hoxhunt

August 10, 2023

AES wins CSO50 award for transformative security behavior change with Hoxhunt

Lacking cybersecurity budget? How human risk reduction is the cybersecurity metric that transformed my budget.

Lacking cybersecurity budget? How human risk reduction is the cybersecurity metric that transformed my budget.

Hoxhunt Human Risk Report on Critical Infrastructure: Key takeaways

Hoxhunt Human Risk Report on Critical Infrastructure: Key takeaways

Human Cyber-Risk Report: Critical Infrastructure

Human Cyber-Risk Report: Critical Infrastructure

Vulnerability reported and fixed: Arbitrary file execution in Foxit PDF clients

Vulnerability reported and fixed: Arbitrary file execution in Foxit PDF clients

Awareness training isn’t enough to protect your business—security behavior change is your missing key

Awareness training isn’t enough to protect your business—security behavior change is your missing key

Vulnerability reported and fixed: Attachment filetype denylist bypass in Foxit PDF clients

Vulnerability reported and fixed: Attachment filetype denylist bypass in Foxit PDF clients

G2 awards Hoxhunt 14 Spring 2023 badges

G2 awards Hoxhunt 14 Spring 2023 badges

How security behavior change lets you measure and manage True Risk

February 7, 2023

How security behavior change lets you measure and manage True Risk

Gartner names Hoxhunt a Security Behavior and Culture Program Representative Provider

January 20, 2023

Gartner names Hoxhunt a Security Behavior and Culture Program Representative Provider

Ten security awareness topics for your employees

Ten security awareness topics for your employees

Top 10 cybersecurity takeaways and trends in 2022

December 28, 2022

Top 10 cybersecurity takeaways and trends in 2022

AI natural language processing and the future of phishing attacks and bypassing MFA, according to ChatGPT

December 21, 2022

AI natural language processing and the future of phishing attacks and bypassing MFA, according to ChatGPT

Hoxhunt expert discusses ransomware and a landmark phishing study in Finland's top business publication

November 16, 2022

Hoxhunt expert discusses ransomware and a landmark phishing study in Finland's top business publication

Report: SaaS permissions leave huge amounts of data exposed

October 10, 2022

Report: SaaS permissions leave huge amounts of data exposed

Gone Phishin' Volume 6: Mid-to-late September, 2022

September 28, 2022

Gone Phishin' Volume 6: Mid-to-late September, 2022

7 great cybersecurity awareness month ideas

September 15, 2022

7 great cybersecurity awareness month ideas

Gone Phishin' Volume 5: early-to-mid September 2022

September 14, 2022

Gone Phishin' Volume 5: early-to-mid September 2022

Gone Phishin': Volume 4 - Late August, 2022

August 24, 2022

Gone Phishin': Volume 4 - Late August, 2022

Gone Phishin' Volume 3: Early August, 2022

August 10, 2022

Gone Phishin' Volume 3: Early August, 2022

Why you need end user security training

Why you need end user security training

What is behavioural cybersecurity?

What is behavioural cybersecurity?

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

November 7, 2023

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

The winding road to Hoxhunt’s $40 million Series B funding round leads to the moon, with Mika Aalto, Hoxhunt co-Founder and CEO

The winding road to Hoxhunt’s $40 million Series B funding round leads to the moon, with Mika Aalto, Hoxhunt co-Founder and CEO

#HoxhuntPhishmas Day 24: Advanced Credential Harvesting

December 24, 2022

#HoxhuntPhishmas Day 24: Advanced Credential Harvesting

Clone phishing turns trusted emails into attacks

November 2, 2022

Clone phishing turns trusted emails into attacks

What's the difference between spear-phishing and regular phishing?

October 20, 2022

What's the difference between spear-phishing and regular phishing?

Beware the fake invoice

October 14, 2022

Beware the fake invoice

What is a Threat Intelligence Feed?

October 6, 2022

What is a Threat Intelligence Feed?

You have a new (fake) voicemail

October 5, 2022

You have a new (fake) voicemail

What to do when hackers pose as IT or tech support

September 29, 2022

What to do when hackers pose as IT or tech support

How hackers prey on your insecurity

September 23, 2022

How hackers prey on your insecurity

You've been mentioned! How hackers exploit curiosity

September 13, 2022

You've been mentioned! How hackers exploit curiosity

How to write an email that won’t be mistaken for spam or a phishing attack

September 1, 2022

How to write an email that won’t be mistaken for spam or a phishing attack

New phishing technique shows alarming vulnerability

August 23, 2022

New phishing technique shows alarming vulnerability

Uh oh! Do you owe? When invoices strike back

August 18, 2022

Uh oh! Do you owe? When invoices strike back

The good, the bad, and the ugly about browser fingerprinting

The good, the bad, and the ugly about browser fingerprinting

Have you seen these common pretexting techniques?

Have you seen these common pretexting techniques?

It's time to update your definition of phishing

It's time to update your definition of phishing

This '90s internet throwback is the latest hacking trend

This '90s internet throwback is the latest hacking trend

Get your hands off my (crypto) wallet!

Get your hands off my (crypto) wallet!

How surveys and research inquiries can be harmful

How surveys and research inquiries can be harmful

Logo kits upgrade phishing attacks

Password protected attachments scam

Password protected attachments scam

BREAKING SCAM ALERT: The 2022 US Department of Transportation phishing attack is the greatest-in-a-bad-way credential harvesting scam we've seen this year

BREAKING SCAM ALERT: The 2022 US Department of Transportation phishing attack is the greatest-in-a-bad-way credential harvesting scam we've seen this year

Pretexting is a simple and effective phishing attack without links

Pretexting is a simple and effective phishing attack without links

Three Steps and Five Effects of the Phishing Attack Kill Chain

Three Steps and Five Effects of the Phishing Attack Kill Chain

Top five everyday-life phishing attacks in Spring 2022

Top five everyday-life phishing attacks in Spring 2022

The dangers of fax phishing

The dangers of fax phishing

ChatGPT vs. human phishing and social engineering study: Who's better?

ChatGPT vs. human phishing and social engineering study: Who's better?

What Is Phishing Training?

What Is Phishing Training?

10 Phishing Training Lessons For Your Employees

10 Phishing Training Lessons For Your Employees

How much does phishing really cost businesses?

October 24, 2022

How much does phishing really cost businesses?

Gone Phishin' Volume 7: Early to mid October, 2022

October 12, 2022

Gone Phishin' Volume 7: Early to mid October, 2022

Infographic: Data breaches in the workplace

October 7, 2022

Infographic: Data breaches in the workplace

GTA 6 leaks and Uber hacked through social engineering

September 19, 2022

GTA 6 leaks and Uber hacked through social engineering

Gone Phishin' volume 2: late July 2022

Gone Phishin' volume 2: late July 2022

Gone Phishing: Biweekly Media Roundup #1

Gone Phishing: Biweekly Media Roundup #1

Phishing services are surprisingly cheap

Phishing services are surprisingly cheap

Infographic: Make-or-Break Phishing Metrics

Infographic: Make-or-Break Phishing Metrics

What are the top 10 costs of phishing?

December 13, 2021

What are the top 10 costs of phishing?

What is the real cost of phishing in 2021?

December 10, 2021

What is the real cost of phishing in 2021?

What is A Spear-Phishing Attack and How Do You Recognize It?

August 27, 2021

What is A Spear-Phishing Attack and How Do You Recognize It?

5 Ways to Prevent Business Email Compromise Attacks

August 12, 2021

5 Ways to Prevent Business Email Compromise Attacks

Gamification in security awareness training

Gamification in security awareness training

Are phishing tests enough to measure resilience?

Are phishing tests enough to measure resilience?

Cybersecurity in a hybrid work environment

Cybersecurity in a hybrid work environment

A guide to effective phishing training

February 8, 2021

A guide to effective phishing training

Two major phishing attacks hitting several enterprises

December 10, 2020

Two major phishing attacks hitting several enterprises

2,000+ reviews and counting: Hoxhunt continues as G2 category leader in Fall 2023 reports

September 13, 2023

2,000+ reviews and counting: Hoxhunt continues as G2 category leader in Fall 2023 reports

Track your human cyber-risk by calculating your security score

Track your human cyber-risk by calculating your security score

Are you minimizing your human cyber-risk? See how you compare to your industry peers

Are you minimizing your human cyber-risk? See how you compare to your industry peers

G2 Summer 2023 Awards recognize Hoxhunt as category leader

G2 Summer 2023 Awards recognize Hoxhunt as category leader

Make addressing reported threats easier with our new Incident Orchestration suite

Make addressing reported threats easier with our new Incident Orchestration suite

What you should do to reduce human risk

What you should do to reduce human risk

How human error impacts human risk in cybersecurity?

How human error impacts human risk in cybersecurity?

5 ways attackers can bypass two-factor authentication

5 ways attackers can bypass two-factor authentication

A Bug in G Suite Lets Attackers Spread Malware on Your Computer

December 20, 2019

A Bug in G Suite Lets Attackers Spread Malware on Your Computer

An Advanced Phishing Attack Using Google Subdomain

December 18, 2019

An Advanced Phishing Attack Using Google Subdomain

Threat feed week 49: eBay, Microsoft, SAP, McAfee, QuickBooks, and telecom impersonations

December 8, 2023

Threat feed week 49: eBay, Microsoft, SAP, McAfee, QuickBooks, and telecom impersonations

Threat feed week 48: Netflix, DocuSign, Microsoft Planner, QuickBooks, McAfee, Polygon, Avalanche, Danske Bank, plus other postal, banking, and crypto phishes

December 1, 2023

Threat feed week 48: Netflix, DocuSign, Microsoft Planner, QuickBooks, McAfee, Polygon, Avalanche, Danske Bank, plus other postal, banking, and crypto phishes

Threat feed week 47: Black Friday, cash awards, donations, and impersonations, including Adobe, the US Treasury Department, Meta Support, Facebook Ads, Microsoft, and more

November 24, 2023

Threat feed week 47: Black Friday, cash awards, donations, and impersonations, including Adobe, the US Treasury Department, Meta Support, Facebook Ads, Microsoft, and more

Threat feed week 46: Microsoft, QuickBooks, Outlook, Chase Bank impersonations, QR codes, and crypto phishing emails

November 17, 2023

Threat feed week 46: Microsoft, QuickBooks, Outlook, Chase Bank impersonations, QR codes, and crypto phishing emails

Threat feed week 45: Facebook, Google Forms, Verizon, Zoom, McAfee, Sharebox, Outlook, QuickBooks, HR, law firms, and telecommunications impersonations

November 10, 2023

Threat feed week 45: Facebook, Google Forms, Verizon, Zoom, McAfee, Sharebox, Outlook, QuickBooks, HR, law firms, and telecommunications impersonations