Hoxhunt blog

Subscribe to our newsletter to get notified on the latest blog posts and more!

See all blog posts

Featured

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

November 7, 2023

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

Fortune 500 energy company, AES was recognized at the 2023 CSO50 awards for their security awareness training program’s transformative effect on phishing resilience, behavior and culture change, and human risk management. Watch their video playbook and learn practical tips for building your own outstanding program. It was done under the supervision of their CISO, Ryan Boulais and David Badanes, Director of Cybersecurity Strategic Initiatives.

Author image

Eliot Baker

Director of Content Marketing

Read the article

Latest articles

Threat feed week 47: Black Friday, cash awards, donations, and impersonations, including Adobe, the US Treasury Department, Meta Support, Facebook Ads, Microsoft, and more

November 24, 2023

Threat feed week 47: Black Friday, cash awards, donations, and impersonations, including Adobe, the US Treasury Department, Meta Support, Facebook Ads, Microsoft, and more

Threat feed week 46: Microsoft, QuickBooks, Outlook, Chase Bank impersonations, QR codes, and crypto phishing emails

November 17, 2023

Threat feed week 46: Microsoft, QuickBooks, Outlook, Chase Bank impersonations, QR codes, and crypto phishing emails

Hoxhunt cracks 2023 Deloitte Fast 50

November 16, 2023

Hoxhunt cracks 2023 Deloitte Fast 50

Threat feed week 45: Facebook, Google Forms, Verizon, Zoom, McAfee, Sharebox, Outlook, QuickBooks, HR, law firms, and telecommunications impersonations

November 10, 2023

Threat feed week 45: Facebook, Google Forms, Verizon, Zoom, McAfee, Sharebox, Outlook, QuickBooks, HR, law firms, and telecommunications impersonations

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

November 7, 2023

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

Threat feed week 44: Microsoft, DocuSign, McAfee, cryptocurrency, debt collections, postal service, telecommunication, banking, insurance, and police impersonations

November 3, 2023

Threat feed week 44: Microsoft, DocuSign, McAfee, cryptocurrency, debt collections, postal service, telecommunication, banking, insurance, and police impersonations

Threat feed week 43: DocuSign, Microsoft, QuickBooks, DHL, Geek Squad, MetaMask, Luxembourg police, and German postal service impersonations

October 27, 2023

Threat feed week 43: DocuSign, Microsoft, QuickBooks, DHL, Geek Squad, MetaMask, Luxembourg police, and German postal service impersonations

Hoxhunt Available Through GuidePoint Security as Demand for Security Behavior Change Accelerates

October 23, 2023

Hoxhunt Available Through GuidePoint Security as Demand for Security Behavior Change Accelerates

Threat feed week 42: PayPal, Outlook, Microsoft, DocuSign, McAfee, Santander, other impersonations, and Bitcoin extortion

October 20, 2023

Threat feed week 42: PayPal, Outlook, Microsoft, DocuSign, McAfee, Santander, other impersonations, and Bitcoin extortion

Don’t scan! Insights from the Hoxhunt cybersecurity human risk benchmark challenge

October 19, 2023

Don’t scan! Insights from the Hoxhunt cybersecurity human risk benchmark challenge

Threat feed week 41: Microsoft, Walmart, QuickBooks, HR impersonations, QR codes, and fake login pages

October 13, 2023

Threat feed week 41: Microsoft, Walmart, QuickBooks, HR impersonations, QR codes, and fake login pages

How I used HOXINSERT in an attack vector against Outlook Web App (OWA) and Windows

October 11, 2023

How I used HOXINSERT in an attack vector against Outlook Web App (OWA) and Windows

Ira Winkler: "Cancel phishing training? Good luck with that!"

Ira Winkler: "Cancel phishing training? Good luck with that!"

Lisa Kubicki from DocuSign on changing behavior with the Hoxhunt Human Risk Management Platform

Lisa Kubicki from DocuSign on changing behavior with the Hoxhunt Human Risk Management Platform

A real approach to implementing machine learning to security awareness, by Ira Winkler

A real approach to implementing machine learning to security awareness, by Ira Winkler

Radical Reporting author, Sara James discusses cybersecurity communication: Video and Q&A

Radical Reporting author, Sara James discusses cybersecurity communication: Video and Q&A

CISO Executive Primer with Bill Bonney, Gary Hayslip, and Matt Stamper

CISO Executive Primer with Bill Bonney, Gary Hayslip, and Matt Stamper

Key takeaways from CISO Sandbox with Lisa Kubicki, DocuSign

Key takeaways from CISO Sandbox with Lisa Kubicki, DocuSign

George Finney joins the CISO Sandbox: Video and key takeaways

George Finney joins the CISO Sandbox: Video and key takeaways

CISO Sandbox with Dan Lohrmann: Video and key takeaways

February 3, 2022

CISO Sandbox with Dan Lohrmann: Video and key takeaways

Mastering Cybersecurity Risk Management, with David X Martin

November 17, 2021

Mastering Cybersecurity Risk Management, with David X Martin

Key Takeaways From Hoxhunt Webinar with Dr. Rebecca Wynn

October 28, 2021

Key Takeaways From Hoxhunt Webinar with Dr. Rebecca Wynn

Hoxhunt recognized by G2 as Summer 2022 Leader and Best Usability in Security Awareness Training

Hoxhunt recognized by G2 as Summer 2022 Leader and Best Usability in Security Awareness Training

Biggest hidden risk in cybersec: missed phishing simulations

Biggest hidden risk in cybersec: missed phishing simulations

Hoxhunt recognized by G2 as Spring 2022 Leader and Best Usability in Security Awareness Training. G2 reviewers vote us into top place overall for Satisfaction and Ease of Use.

Hoxhunt recognized by G2 as Spring 2022 Leader and Best Usability in Security Awareness Training. G2 reviewers vote us into top place overall for Satisfaction and Ease of Use.

Introducing the Hoxhunt Behavioral Cybersecurity Report

Introducing the Hoxhunt Behavioral Cybersecurity Report

Log4j Log4shell vulnerability explained: Just when you thought it was safe to go on winter holiday

December 20, 2021

Log4j Log4shell vulnerability explained: Just when you thought it was safe to go on winter holiday

Hoxhunt recognized as G2 Winter 2022 Leader in Security Awareness Training

December 15, 2021

Hoxhunt recognized as G2 Winter 2022 Leader in Security Awareness Training

Cybersecurity awareness training and cyber insurance: at the crossroads

December 21, 2021

Cybersecurity awareness training and cyber insurance: at the crossroads

Change this one default setting in your Azure AD

November 29, 2021

Change this one default setting in your Azure AD

Cybersecurity Month: TreeSolution's 5 tips on cybersecurity

October 1, 2021

Cybersecurity Month: TreeSolution's 5 tips on cybersecurity

ISO/IEC 27001 compliance and cybersecurity awareness training

September 7, 2021

ISO/IEC 27001 compliance and cybersecurity awareness training

Hoxhunt Recognized In The 2021 Gartner Market Guide (SACBT)

September 3, 2021

Hoxhunt Recognized In The 2021 Gartner Market Guide (SACBT)

Why Business Email Compromise Attack Is The King Of Cybercrime

August 12, 2021

Why Business Email Compromise Attack Is The King Of Cybercrime

Guide to the DoD Phishing Awareness Challenge: 9 key takeaways

Guide to the DoD Phishing Awareness Challenge: 9 key takeaways

The Difference Between Measured & True Risk Of Phishing

The Difference Between Measured & True Risk Of Phishing

Positive, Not Punitive Cybersecurity Awareness Training

Positive, Not Punitive Cybersecurity Awareness Training

Prof. Dr. Andreas Heinemann: The Corporate Phishing Threat

Prof. Dr. Andreas Heinemann: The Corporate Phishing Threat

Seven reasons to build a human firewall

Seven reasons to build a human firewall

How to create a human firewall?

How to create a human firewall?

The Risk Of New Employees And How Security Teams Can Tackle It

February 26, 2021

The Risk Of New Employees And How Security Teams Can Tackle It

Everything you need to know about ransomware

December 3, 2020

Everything you need to know about ransomware

12 ways how attackers crack your password

November 3, 2020

12 ways how attackers crack your password

The Best Attack Simulations For Your Cybersecurity Training

October 21, 2020

The Best Attack Simulations For Your Cybersecurity Training

Financially motivated cyber attacks on executives is on the rise

September 2, 2020

Financially motivated cyber attacks on executives is on the rise

Why Organizations Need Positive Cybersecurity Culture & Training

August 31, 2020

Why Organizations Need Positive Cybersecurity Culture & Training

Why Finance and IT should work together to mitigate security risk

August 25, 2020

Why Finance and IT should work together to mitigate security risk

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

November 7, 2023

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

The winding road to Hoxhunt’s $40 million Series B funding round leads to the moon, with Mika Aalto, Hoxhunt co-Founder and CEO

The winding road to Hoxhunt’s $40 million Series B funding round leads to the moon, with Mika Aalto, Hoxhunt co-Founder and CEO

#HoxhuntPhishmas Day 24: Advanced Credential Harvesting

December 24, 2022

#HoxhuntPhishmas Day 24: Advanced Credential Harvesting

Clone phishing turns trusted emails into attacks

November 2, 2022

Clone phishing turns trusted emails into attacks

What's the difference between spear-phishing and regular phishing?

October 20, 2022

What's the difference between spear-phishing and regular phishing?

Beware the fake invoice

October 14, 2022

Beware the fake invoice

What is a Threat Intelligence Feed?

October 6, 2022

What is a Threat Intelligence Feed?

You have a new (fake) voicemail

October 5, 2022

You have a new (fake) voicemail

What to do when hackers pose as IT or tech support

September 29, 2022

What to do when hackers pose as IT or tech support

How hackers prey on your insecurity

September 23, 2022

How hackers prey on your insecurity

You've been mentioned! How hackers exploit curiosity

September 13, 2022

You've been mentioned! How hackers exploit curiosity

How to write an email that won’t be mistaken for spam or a phishing attack

September 1, 2022

How to write an email that won’t be mistaken for spam or a phishing attack

New phishing technique shows alarming vulnerability

August 23, 2022

New phishing technique shows alarming vulnerability

Uh oh! Do you owe? When invoices strike back

August 18, 2022

Uh oh! Do you owe? When invoices strike back

The good, the bad, and the ugly about browser fingerprinting

The good, the bad, and the ugly about browser fingerprinting

Have you seen these common pretexting techniques?

Have you seen these common pretexting techniques?

It's time to update your definition of phishing

It's time to update your definition of phishing

This '90s internet throwback is the latest hacking trend

This '90s internet throwback is the latest hacking trend

Get your hands off my (crypto) wallet!

Get your hands off my (crypto) wallet!

How surveys and research inquiries can be harmful

How surveys and research inquiries can be harmful

Logo kits upgrade phishing attacks

Password protected attachments scam

Password protected attachments scam

BREAKING SCAM ALERT: The 2022 US Department of Transportation phishing attack is the greatest-in-a-bad-way credential harvesting scam we've seen this year

BREAKING SCAM ALERT: The 2022 US Department of Transportation phishing attack is the greatest-in-a-bad-way credential harvesting scam we've seen this year

Pretexting is a simple and effective phishing attack without links

Pretexting is a simple and effective phishing attack without links

Three Steps and Five Effects of the Phishing Attack Kill Chain

Three Steps and Five Effects of the Phishing Attack Kill Chain

Top five everyday-life phishing attacks in Spring 2022

Top five everyday-life phishing attacks in Spring 2022

The dangers of fax phishing

The dangers of fax phishing

ChatGPT vs. human phishing and social engineering study: Who's better?

ChatGPT vs. human phishing and social engineering study: Who's better?

What Is Phishing Training?

What Is Phishing Training?

10 Phishing Training Lessons For Your Employees

10 Phishing Training Lessons For Your Employees

How much does phishing really cost businesses?

October 24, 2022

How much does phishing really cost businesses?

Gone Phishin' Volume 7: Early to mid October, 2022

October 12, 2022

Gone Phishin' Volume 7: Early to mid October, 2022

Infographic: Data breaches in the workplace

October 7, 2022

Infographic: Data breaches in the workplace

GTA 6 leaks and Uber hacked through social engineering

September 19, 2022

GTA 6 leaks and Uber hacked through social engineering

Gone Phishin' volume 2: late July 2022

Gone Phishin' volume 2: late July 2022

Gone Phishing: Biweekly Media Roundup #1

Gone Phishing: Biweekly Media Roundup #1

Phishing services are surprisingly cheap

Phishing services are surprisingly cheap

Infographic: Make-or-Break Phishing Metrics

Infographic: Make-or-Break Phishing Metrics

What are the top 10 costs of phishing?

December 13, 2021

What are the top 10 costs of phishing?

What is the real cost of phishing in 2021?

December 10, 2021

What is the real cost of phishing in 2021?

What is A Spear-Phishing Attack and How Do You Recognize It?

August 27, 2021

What is A Spear-Phishing Attack and How Do You Recognize It?

5 Ways to Prevent Business Email Compromise Attacks

August 12, 2021

5 Ways to Prevent Business Email Compromise Attacks

Gamification in security awareness training

Gamification in security awareness training

Are phishing tests enough to measure resilience?

Are phishing tests enough to measure resilience?

Cybersecurity in a hybrid work environment

Cybersecurity in a hybrid work environment

A guide to effective phishing training

February 8, 2021

A guide to effective phishing training

Two major phishing attacks hitting several enterprises

December 10, 2020

Two major phishing attacks hitting several enterprises

2,000+ reviews and counting: Hoxhunt continues as G2 category leader in Fall 2023 reports

September 13, 2023

2,000+ reviews and counting: Hoxhunt continues as G2 category leader in Fall 2023 reports

Track your human cyber-risk by calculating your security score

Track your human cyber-risk by calculating your security score

Are you minimizing your human cyber-risk? See how you compare to your industry peers

Are you minimizing your human cyber-risk? See how you compare to your industry peers

G2 Summer 2023 Awards recognize Hoxhunt as category leader

G2 Summer 2023 Awards recognize Hoxhunt as category leader

Make addressing reported threats easier with our new Incident Orchestration suite

Make addressing reported threats easier with our new Incident Orchestration suite

What you should do to reduce human risk

What you should do to reduce human risk

How human error impacts human risk in cybersecurity?

How human error impacts human risk in cybersecurity?

5 ways attackers can bypass two-factor authentication

5 ways attackers can bypass two-factor authentication

A Bug in G Suite Lets Attackers Spread Malware on Your Computer

December 20, 2019

A Bug in G Suite Lets Attackers Spread Malware on Your Computer

An Advanced Phishing Attack Using Google Subdomain

December 18, 2019

An Advanced Phishing Attack Using Google Subdomain

Threat feed week 47: Black Friday, cash awards, donations, and impersonations, including Adobe, the US Treasury Department, Meta Support, Facebook Ads, Microsoft, and more

November 24, 2023

Threat feed week 47: Black Friday, cash awards, donations, and impersonations, including Adobe, the US Treasury Department, Meta Support, Facebook Ads, Microsoft, and more

Threat feed week 46: Microsoft, QuickBooks, Outlook, Chase Bank impersonations, QR codes, and crypto phishing emails

November 17, 2023

Threat feed week 46: Microsoft, QuickBooks, Outlook, Chase Bank impersonations, QR codes, and crypto phishing emails

Threat feed week 45: Facebook, Google Forms, Verizon, Zoom, McAfee, Sharebox, Outlook, QuickBooks, HR, law firms, and telecommunications impersonations

November 10, 2023

Threat feed week 45: Facebook, Google Forms, Verizon, Zoom, McAfee, Sharebox, Outlook, QuickBooks, HR, law firms, and telecommunications impersonations

Threat feed week 44: Microsoft, DocuSign, McAfee, cryptocurrency, debt collections, postal service, telecommunication, banking, insurance, and police impersonations

November 3, 2023

Threat feed week 44: Microsoft, DocuSign, McAfee, cryptocurrency, debt collections, postal service, telecommunication, banking, insurance, and police impersonations

Threat feed week 43: DocuSign, Microsoft, QuickBooks, DHL, Geek Squad, MetaMask, Luxembourg police, and German postal service impersonations

October 27, 2023

Threat feed week 43: DocuSign, Microsoft, QuickBooks, DHL, Geek Squad, MetaMask, Luxembourg police, and German postal service impersonations