Hoxhunt blog

Subscribe to our newsletter to get notified on the latest blog posts and more!

See all blog posts

Featured

2,000+ reviews and counting: Hoxhunt continues as G2 category leader in Fall 2023 reports

September 13, 2023

2,000+ reviews and counting: Hoxhunt continues as G2 category leader in Fall 2023 reports

Crossing 2,000 reviews last weekend, Hoxhunt was awarded 24 badges across six cybersecurity awareness training categories by G2 in their Fall 2023 Report.

Author image

Read the article

Latest articles

How I added a customization feature to phishing pages by abusing public Cloudflare Workers

September 18, 2023

How I added a customization feature to phishing pages by abusing public Cloudflare Workers

Threat feed week 37: SharePoint, DocuSign, Hoxhunt impersonations, PDF, and more QR codes

September 15, 2023

Threat feed week 37: SharePoint, DocuSign, Hoxhunt impersonations, PDF, and more QR codes

2,000+ reviews and counting: Hoxhunt continues as G2 category leader in Fall 2023 reports

September 13, 2023

2,000+ reviews and counting: Hoxhunt continues as G2 category leader in Fall 2023 reports

Level up your security awareness to the max with Kinsek

September 12, 2023

Level up your security awareness to the max with Kinsek

Threat feed week 36: Disney+, Xerox, SharePoint impersonations and a fake voicemail notification

September 8, 2023

Threat feed week 36: Disney+, Xerox, SharePoint impersonations and a fake voicemail notification

QR code phishing scams are on the rise—make sure you don't get caught

September 6, 2023

QR code phishing scams are on the rise—make sure you don't get caught

Threat feed week 35: Microsoft Planner, SharePoint, Qobuz impersonations, and fake voicemail notification

September 1, 2023

Threat feed week 35: Microsoft Planner, SharePoint, Qobuz impersonations, and fake voicemail notification

Hoxhunt Bolsters Partnership Strategy to Bring Leading Cybersecurity Behavior Change Technology to the UK

August 29, 2023

Hoxhunt Bolsters Partnership Strategy to Bring Leading Cybersecurity Behavior Change Technology to the UK

Threat feed week 34: DHL QR code, DocuSign impersonations, and fake internal storage notification

August 25, 2023

Threat feed week 34: DHL QR code, DocuSign impersonations, and fake internal storage notification

Threat feed week 33: DocuSign and Microsoft impersonations

August 18, 2023

Threat feed week 33: DocuSign and Microsoft impersonations

Threat feed week 32: Bank of America, FedEx, and fake account closures

August 11, 2023

Threat feed week 32: Bank of America, FedEx, and fake account closures

AES wins CSO50 award for transformative security behavior change with Hoxhunt

August 10, 2023

AES wins CSO50 award for transformative security behavior change with Hoxhunt

Ira Winkler: "Cancel phishing training? Good luck with that!"

Ira Winkler: "Cancel phishing training? Good luck with that!"

Lisa Kubicki from DocuSign on changing behavior with the Hoxhunt Human Risk Management Platform

Lisa Kubicki from DocuSign on changing behavior with the Hoxhunt Human Risk Management Platform

A real approach to implementing machine learning to security awareness, by Ira Winkler

A real approach to implementing machine learning to security awareness, by Ira Winkler

Radical Reporting author, Sara James discusses cybersecurity communication: Video and Q&A

Radical Reporting author, Sara James discusses cybersecurity communication: Video and Q&A

CISO Executive Primer with Bill Bonney, Gary Hayslip, and Matt Stamper

CISO Executive Primer with Bill Bonney, Gary Hayslip, and Matt Stamper

Key takeaways from CISO Sandbox with Lisa Kubicki, DocuSign

Key takeaways from CISO Sandbox with Lisa Kubicki, DocuSign

George Finney joins the CISO Sandbox: Video and key takeaways

George Finney joins the CISO Sandbox: Video and key takeaways

CISO Sandbox with Dan Lohrmann: Video and key takeaways

February 3, 2022

CISO Sandbox with Dan Lohrmann: Video and key takeaways

Mastering Cybersecurity Risk Management, with David X Martin

November 17, 2021

Mastering Cybersecurity Risk Management, with David X Martin

Key Takeaways From Hoxhunt Webinar with Dr. Rebecca Wynn

October 28, 2021

Key Takeaways From Hoxhunt Webinar with Dr. Rebecca Wynn

Hoxhunt Bolsters Partnership Strategy to Bring Leading Cybersecurity Behavior Change Technology to the UK

August 29, 2023

Hoxhunt Bolsters Partnership Strategy to Bring Leading Cybersecurity Behavior Change Technology to the UK

AES wins CSO50 award for transformative security behavior change with Hoxhunt

August 10, 2023

AES wins CSO50 award for transformative security behavior change with Hoxhunt

Lacking cybersecurity budget? You might be missing risk reduction metrics.

Lacking cybersecurity budget? You might be missing risk reduction metrics.

Hoxhunt Human Risk Report on Critical Infrastructure: Key takeaways

Hoxhunt Human Risk Report on Critical Infrastructure: Key takeaways

Human Cyber-Risk Report: Critical Infrastructure

Human Cyber-Risk Report: Critical Infrastructure

Vulnerability reported and fixed: Arbitrary file execution in Foxit PDF clients

Vulnerability reported and fixed: Arbitrary file execution in Foxit PDF clients

Awareness training isn’t enough to protect your business—security behavior change is your missing key

Awareness training isn’t enough to protect your business—security behavior change is your missing key

Vulnerability reported and fixed: Attachment filetype denylist bypass in Foxit PDF clients

Vulnerability reported and fixed: Attachment filetype denylist bypass in Foxit PDF clients

G2 awards Hoxhunt 14 Spring 2023 badges

G2 awards Hoxhunt 14 Spring 2023 badges

How security behavior change lets you measure and manage True Risk

February 7, 2023

How security behavior change lets you measure and manage True Risk

Gartner names Hoxhunt a Security Behavior and Culture Program Representative Provider

January 20, 2023

Gartner names Hoxhunt a Security Behavior and Culture Program Representative Provider

10 Security Awareness Lessons for Your Employees

10 Security Awareness Lessons for Your Employees

Top 10 cybersecurity takeaways and trends in 2022

December 28, 2022

Top 10 cybersecurity takeaways and trends in 2022

AI natural language processing and the future of phishing attacks and bypassing MFA, according to ChatGPT

December 21, 2022

AI natural language processing and the future of phishing attacks and bypassing MFA, according to ChatGPT

Hoxhunt expert discusses ransomware and a landmark phishing study in Finland's top business publication

November 16, 2022

Hoxhunt expert discusses ransomware and a landmark phishing study in Finland's top business publication

Report: SaaS permissions leave huge amounts of data exposed

October 10, 2022

Report: SaaS permissions leave huge amounts of data exposed

Gone Phishin' Volume 6: Mid-to-late September, 2022

September 28, 2022

Gone Phishin' Volume 6: Mid-to-late September, 2022

7 great cybersecurity awareness month ideas

September 15, 2022

7 great cybersecurity awareness month ideas

Gone Phishin' Volume 5: early-to-mid September 2022

September 14, 2022

Gone Phishin' Volume 5: early-to-mid September 2022

Gone Phishin': Volume 4 - Late August, 2022

August 24, 2022

Gone Phishin': Volume 4 - Late August, 2022

Gone Phishin' Volume 3: Early August, 2022

August 10, 2022

Gone Phishin' Volume 3: Early August, 2022

Why you need end user security training

Why you need end user security training

What is behavioural cybersecurity?

What is behavioural cybersecurity?

Hoxhunt recognized by G2 as Summer 2022 Leader and Best Usability in Security Awareness Training

Hoxhunt recognized by G2 as Summer 2022 Leader and Best Usability in Security Awareness Training

Biggest hidden risk in cybersec: missed phishing simulations

Biggest hidden risk in cybersec: missed phishing simulations

The winding road to Hoxhunt’s $40 million Series B funding round leads to the moon, with Mika Aalto, Hoxhunt co-Founder and CEO

The winding road to Hoxhunt’s $40 million Series B funding round leads to the moon, with Mika Aalto, Hoxhunt co-Founder and CEO

November 5, 2021

Protect a brand from cyber threats in the financial industry

#HoxhuntPhishmas Day 24: Advanced Credential Harvesting

December 24, 2022

#HoxhuntPhishmas Day 24: Advanced Credential Harvesting

Clone phishing turns trusted emails into attacks

November 2, 2022

Clone phishing turns trusted emails into attacks

What's the difference between spear-phishing and regular phishing?

October 20, 2022

What's the difference between spear-phishing and regular phishing?

Beware the fake invoice

October 14, 2022

Beware the fake invoice

What is a Threat Intelligence Feed?

October 6, 2022

What is a Threat Intelligence Feed?

You have a new (fake) voicemail

October 5, 2022

You have a new (fake) voicemail

What to do when hackers pose as IT or tech support

September 29, 2022

What to do when hackers pose as IT or tech support

How hackers prey on your insecurity

September 23, 2022

How hackers prey on your insecurity

You've been mentioned! How hackers exploit curiosity

September 13, 2022

You've been mentioned! How hackers exploit curiosity

How to write an email that won’t be mistaken for spam or a phishing attack

September 1, 2022

How to write an email that won’t be mistaken for spam or a phishing attack

New phishing technique shows alarming vulnerability

August 23, 2022

New phishing technique shows alarming vulnerability

Uh oh! Do you owe? When invoices strike back

August 18, 2022

Uh oh! Do you owe? When invoices strike back

The good, the bad, and the ugly about browser fingerprinting

The good, the bad, and the ugly about browser fingerprinting

Have you seen these common pretexting techniques?

Have you seen these common pretexting techniques?

It's time to update your definition of phishing

It's time to update your definition of phishing

This '90s internet throwback is the latest hacking trend

This '90s internet throwback is the latest hacking trend

Get your hands off my (crypto) wallet!

Get your hands off my (crypto) wallet!

How surveys and research inquiries can be harmful

How surveys and research inquiries can be harmful

Logo kits upgrade phishing attacks

Password protected attachments scam

Password protected attachments scam

BREAKING SCAM ALERT: The 2022 US Department of Transportation phishing attack is the greatest-in-a-bad-way credential harvesting scam we've seen this year

BREAKING SCAM ALERT: The 2022 US Department of Transportation phishing attack is the greatest-in-a-bad-way credential harvesting scam we've seen this year

Pretexting is a simple and effective phishing attack without links

Pretexting is a simple and effective phishing attack without links

Three Steps and Five Effects of the Phishing Attack Kill Chain

Three Steps and Five Effects of the Phishing Attack Kill Chain

Top five everyday-life phishing attacks in Spring 2022

Top five everyday-life phishing attacks in Spring 2022

The dangers of fax phishing

The dangers of fax phishing

ChatGPT vs. human phishing and social engineering study: Who's better?

ChatGPT vs. human phishing and social engineering study: Who's better?

What Is Phishing Training?

What Is Phishing Training?

10 Phishing Training Lessons For Your Employees

10 Phishing Training Lessons For Your Employees

How much does phishing really cost businesses?

October 24, 2022

How much does phishing really cost businesses?

Gone Phishin' Volume 7: Early to mid October, 2022

October 12, 2022

Gone Phishin' Volume 7: Early to mid October, 2022

Infographic: Data breaches in the workplace

October 7, 2022

Infographic: Data breaches in the workplace

GTA 6 leaks and Uber hacked through social engineering

September 19, 2022

GTA 6 leaks and Uber hacked through social engineering

Gone Phishin' volume 2: late July 2022

Gone Phishin' volume 2: late July 2022

Gone Phishing: Biweekly Media Roundup #1

Gone Phishing: Biweekly Media Roundup #1

Phishing services are surprisingly cheap

Phishing services are surprisingly cheap

Infographic: Make-or-Break Phishing Metrics

Infographic: Make-or-Break Phishing Metrics

What are the top 10 costs of phishing?

December 13, 2021

What are the top 10 costs of phishing?

What is the real cost of phishing in 2021?

December 10, 2021

What is the real cost of phishing in 2021?

What is A Spear-Phishing Attack and How Do You Recognize It?

August 27, 2021

What is A Spear-Phishing Attack and How Do You Recognize It?

5 Ways to Prevent Business Email Compromise Attacks

August 12, 2021

5 Ways to Prevent Business Email Compromise Attacks

Gamification in security awareness training

Gamification in security awareness training

Are phishing tests enough to measure resilience?

Are phishing tests enough to measure resilience?

Cybersecurity in a hybrid work environment

Cybersecurity in a hybrid work environment

A guide to effective phishing training

February 8, 2021

A guide to effective phishing training

Two major phishing attacks hitting several enterprises

December 10, 2020

Two major phishing attacks hitting several enterprises

Hoxhunt named winner of two prestigious Global InfoSec Awards by Cyber Defense Magazine

Hoxhunt named winner of two prestigious Global InfoSec Awards by Cyber Defense Magazine

Hoxhunt named Most Innovative Security Education Company in the 19th Annual 2023 Globee® Cybersecurity Awards

Hoxhunt named Most Innovative Security Education Company in the 19th Annual 2023 Globee® Cybersecurity Awards

Introducing three new products and Hoxhunt 2.0: The comprehensive Human Risk Management Platform

February 23, 2023

Introducing three new products and Hoxhunt 2.0: The comprehensive Human Risk Management Platform

Hoxhunt earns coveted spot on G2’s 2023 Best Software Awards for EMEA Software Companies!

February 8, 2023

Hoxhunt earns coveted spot on G2’s 2023 Best Software Awards for EMEA Software Companies!

Hoxhunt recognized with 3 TrustRadius awards!

February 2, 2023

Hoxhunt recognized with 3 TrustRadius awards!

What you should do to reduce human risk

What you should do to reduce human risk

How human error impacts human risk in cybersecurity?

How human error impacts human risk in cybersecurity?

5 ways attackers can bypass two-factor authentication

5 ways attackers can bypass two-factor authentication

A Bug in G Suite Lets Attackers Spread Malware on Your Computer

December 20, 2019

A Bug in G Suite Lets Attackers Spread Malware on Your Computer

An Advanced Phishing Attack Using Google Subdomain

December 18, 2019

An Advanced Phishing Attack Using Google Subdomain

Threat feed week 37: SharePoint, DocuSign, Hoxhunt impersonations, PDF, and more QR codes

September 15, 2023

Threat feed week 37: SharePoint, DocuSign, Hoxhunt impersonations, PDF, and more QR codes

Threat feed week 36: Disney+, Xerox, SharePoint impersonations and a fake voicemail notification

September 8, 2023

Threat feed week 36: Disney+, Xerox, SharePoint impersonations and a fake voicemail notification

Threat feed week 35: Microsoft Planner, SharePoint, Qobuz impersonations, and fake voicemail notification

September 1, 2023

Threat feed week 35: Microsoft Planner, SharePoint, Qobuz impersonations, and fake voicemail notification

Threat feed week 34: DHL QR code, DocuSign impersonations, and fake internal storage notification

August 25, 2023

Threat feed week 34: DHL QR code, DocuSign impersonations, and fake internal storage notification

Threat feed week 33: DocuSign and Microsoft impersonations

August 18, 2023

Threat feed week 33: DocuSign and Microsoft impersonations