Hoxhunt blog

Subscribe to our newsletter to get notified on the latest blog posts and more!

See all blog posts

Featured

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

November 7, 2023

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

Fortune 500 energy company, AES was recognized at the 2023 CSO50 awards for their security awareness training program’s transformative effect on phishing resilience, behavior and culture change, and human risk management. Watch their video playbook and learn practical tips for building your own outstanding program. It was done under the supervision of their CISO, Ryan Boulais and David Badanes, Director of Cybersecurity Strategic Initiatives.

Author image

Eliot Baker

Director of Content Marketing

Read the article

Latest articles

Threat feed week 47: Black Friday, cash awards, donations, and impersonations, including Adobe, the US Treasury Department, Meta Support, Facebook Ads, Microsoft, and more

November 24, 2023

Threat feed week 47: Black Friday, cash awards, donations, and impersonations, including Adobe, the US Treasury Department, Meta Support, Facebook Ads, Microsoft, and more

Threat feed week 46: Microsoft, QuickBooks, Outlook, Chase Bank impersonations, QR codes, and crypto phishing emails

November 17, 2023

Threat feed week 46: Microsoft, QuickBooks, Outlook, Chase Bank impersonations, QR codes, and crypto phishing emails

Hoxhunt cracks 2023 Deloitte Fast 50

November 16, 2023

Hoxhunt cracks 2023 Deloitte Fast 50

Threat feed week 45: Facebook, Google Forms, Verizon, Zoom, McAfee, Sharebox, Outlook, QuickBooks, HR, law firms, and telecommunications impersonations

November 10, 2023

Threat feed week 45: Facebook, Google Forms, Verizon, Zoom, McAfee, Sharebox, Outlook, QuickBooks, HR, law firms, and telecommunications impersonations

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

November 7, 2023

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

Threat feed week 44: Microsoft, DocuSign, McAfee, cryptocurrency, debt collections, postal service, telecommunication, banking, insurance, and police impersonations

November 3, 2023

Threat feed week 44: Microsoft, DocuSign, McAfee, cryptocurrency, debt collections, postal service, telecommunication, banking, insurance, and police impersonations

Threat feed week 43: DocuSign, Microsoft, QuickBooks, DHL, Geek Squad, MetaMask, Luxembourg police, and German postal service impersonations

October 27, 2023

Threat feed week 43: DocuSign, Microsoft, QuickBooks, DHL, Geek Squad, MetaMask, Luxembourg police, and German postal service impersonations

Hoxhunt Available Through GuidePoint Security as Demand for Security Behavior Change Accelerates

October 23, 2023

Hoxhunt Available Through GuidePoint Security as Demand for Security Behavior Change Accelerates

Threat feed week 42: PayPal, Outlook, Microsoft, DocuSign, McAfee, Santander, other impersonations, and Bitcoin extortion

October 20, 2023

Threat feed week 42: PayPal, Outlook, Microsoft, DocuSign, McAfee, Santander, other impersonations, and Bitcoin extortion

Don’t scan! Insights from the Hoxhunt cybersecurity human risk benchmark challenge

October 19, 2023

Don’t scan! Insights from the Hoxhunt cybersecurity human risk benchmark challenge

Threat feed week 41: Microsoft, Walmart, QuickBooks, HR impersonations, QR codes, and fake login pages

October 13, 2023

Threat feed week 41: Microsoft, Walmart, QuickBooks, HR impersonations, QR codes, and fake login pages

How I used HOXINSERT in an attack vector against Outlook Web App (OWA) and Windows

October 11, 2023

How I used HOXINSERT in an attack vector against Outlook Web App (OWA) and Windows

Cybersecurity Awareness Month Webinar With Nixu and Aktia

October 20, 2021

Cybersecurity Awareness Month Webinar With Nixu and Aktia

Prof. Shoemaker: Integrating Cybersecurity & The C-Suite

October 7, 2021

Prof. Shoemaker: Integrating Cybersecurity & The C-Suite

Interview: Virtual CISO, Barak Engel, Part II

September 20, 2021

Interview: Virtual CISO, Barak Engel, Part II

Barak Engel: From Virtual CISO to the Security Hippie

September 17, 2021

Barak Engel: From Virtual CISO to the Security Hippie

Key Takeaways: The Security Leader's Communication Playbook

Key Takeaways: The Security Leader's Communication Playbook

CISO Evolution: From Business Blocker Nerd To Rockstar Enabler

CISO Evolution: From Business Blocker Nerd To Rockstar Enabler

Ten key takeaways from the Sandbox with CISO of IGT, Kevin DeLange

Ten key takeaways from the Sandbox with CISO of IGT, Kevin DeLange

Interview with Henri Heinonen, CISO, Aktia

September 29, 2020

Interview with Henri Heinonen, CISO, Aktia

Interview with Christophe Rome, CISO at Lineas

Interview with Christophe Rome, CISO at Lineas

Hoxhunt cracks 2023 Deloitte Fast 50

November 16, 2023

Hoxhunt cracks 2023 Deloitte Fast 50

Hoxhunt Available Through GuidePoint Security as Demand for Security Behavior Change Accelerates

October 23, 2023

Hoxhunt Available Through GuidePoint Security as Demand for Security Behavior Change Accelerates

Hoxhunt Bolsters Partnership Strategy to Bring Leading Cybersecurity Behavior Change Technology to the UK

August 29, 2023

Hoxhunt Bolsters Partnership Strategy to Bring Leading Cybersecurity Behavior Change Technology to the UK

AES wins CSO50 award for transformative security behavior change with Hoxhunt

August 10, 2023

AES wins CSO50 award for transformative security behavior change with Hoxhunt

Lacking cybersecurity budget? You might be missing risk reduction metrics.

Lacking cybersecurity budget? You might be missing risk reduction metrics.

Hoxhunt Human Risk Report on Critical Infrastructure: Key takeaways

Hoxhunt Human Risk Report on Critical Infrastructure: Key takeaways

Human Cyber-Risk Report: Critical Infrastructure

Human Cyber-Risk Report: Critical Infrastructure

Vulnerability reported and fixed: Arbitrary file execution in Foxit PDF clients

Vulnerability reported and fixed: Arbitrary file execution in Foxit PDF clients

Awareness training isn’t enough to protect your business—security behavior change is your missing key

Awareness training isn’t enough to protect your business—security behavior change is your missing key

Vulnerability reported and fixed: Attachment filetype denylist bypass in Foxit PDF clients

Vulnerability reported and fixed: Attachment filetype denylist bypass in Foxit PDF clients

G2 awards Hoxhunt 14 Spring 2023 badges

G2 awards Hoxhunt 14 Spring 2023 badges

How security behavior change lets you measure and manage True Risk

February 7, 2023

How security behavior change lets you measure and manage True Risk

Gartner names Hoxhunt a Security Behavior and Culture Program Representative Provider

January 20, 2023

Gartner names Hoxhunt a Security Behavior and Culture Program Representative Provider

10 Security Awareness Lessons for Your Employees

10 Security Awareness Lessons for Your Employees

Top 10 cybersecurity takeaways and trends in 2022

December 28, 2022

Top 10 cybersecurity takeaways and trends in 2022

AI natural language processing and the future of phishing attacks and bypassing MFA, according to ChatGPT

December 21, 2022

AI natural language processing and the future of phishing attacks and bypassing MFA, according to ChatGPT

Hoxhunt expert discusses ransomware and a landmark phishing study in Finland's top business publication

November 16, 2022

Hoxhunt expert discusses ransomware and a landmark phishing study in Finland's top business publication

Report: SaaS permissions leave huge amounts of data exposed

October 10, 2022

Report: SaaS permissions leave huge amounts of data exposed

Gone Phishin' Volume 6: Mid-to-late September, 2022

September 28, 2022

Gone Phishin' Volume 6: Mid-to-late September, 2022

7 great cybersecurity awareness month ideas

September 15, 2022

7 great cybersecurity awareness month ideas

Gone Phishin' Volume 5: early-to-mid September 2022

September 14, 2022

Gone Phishin' Volume 5: early-to-mid September 2022

Gone Phishin': Volume 4 - Late August, 2022

August 24, 2022

Gone Phishin': Volume 4 - Late August, 2022

Gone Phishin' Volume 3: Early August, 2022

August 10, 2022

Gone Phishin' Volume 3: Early August, 2022

Why you need end user security training

Why you need end user security training

What is behavioural cybersecurity?

What is behavioural cybersecurity?

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

November 7, 2023

10 steps to award-winning cybersecurity training: The AES CSO50 Playbook

The winding road to Hoxhunt’s $40 million Series B funding round leads to the moon, with Mika Aalto, Hoxhunt co-Founder and CEO

The winding road to Hoxhunt’s $40 million Series B funding round leads to the moon, with Mika Aalto, Hoxhunt co-Founder and CEO

#HoxhuntPhishmas Day 24: Advanced Credential Harvesting

December 24, 2022

#HoxhuntPhishmas Day 24: Advanced Credential Harvesting

Clone phishing turns trusted emails into attacks

November 2, 2022

Clone phishing turns trusted emails into attacks

What's the difference between spear-phishing and regular phishing?

October 20, 2022

What's the difference between spear-phishing and regular phishing?

Beware the fake invoice

October 14, 2022

Beware the fake invoice

What is a Threat Intelligence Feed?

October 6, 2022

What is a Threat Intelligence Feed?

You have a new (fake) voicemail

October 5, 2022

You have a new (fake) voicemail

What to do when hackers pose as IT or tech support

September 29, 2022

What to do when hackers pose as IT or tech support

How hackers prey on your insecurity

September 23, 2022

How hackers prey on your insecurity

You've been mentioned! How hackers exploit curiosity

September 13, 2022

You've been mentioned! How hackers exploit curiosity

How to write an email that won’t be mistaken for spam or a phishing attack

September 1, 2022

How to write an email that won’t be mistaken for spam or a phishing attack

New phishing technique shows alarming vulnerability

August 23, 2022

New phishing technique shows alarming vulnerability

Uh oh! Do you owe? When invoices strike back

August 18, 2022

Uh oh! Do you owe? When invoices strike back

The good, the bad, and the ugly about browser fingerprinting

The good, the bad, and the ugly about browser fingerprinting

Have you seen these common pretexting techniques?

Have you seen these common pretexting techniques?

It's time to update your definition of phishing

It's time to update your definition of phishing

This '90s internet throwback is the latest hacking trend

This '90s internet throwback is the latest hacking trend

Get your hands off my (crypto) wallet!

Get your hands off my (crypto) wallet!

How surveys and research inquiries can be harmful

How surveys and research inquiries can be harmful

Logo kits upgrade phishing attacks

Password protected attachments scam

Password protected attachments scam

BREAKING SCAM ALERT: The 2022 US Department of Transportation phishing attack is the greatest-in-a-bad-way credential harvesting scam we've seen this year

BREAKING SCAM ALERT: The 2022 US Department of Transportation phishing attack is the greatest-in-a-bad-way credential harvesting scam we've seen this year

Pretexting is a simple and effective phishing attack without links

Pretexting is a simple and effective phishing attack without links

Three Steps and Five Effects of the Phishing Attack Kill Chain

Three Steps and Five Effects of the Phishing Attack Kill Chain

Top five everyday-life phishing attacks in Spring 2022

Top five everyday-life phishing attacks in Spring 2022

The dangers of fax phishing

The dangers of fax phishing

ChatGPT vs. human phishing and social engineering study: Who's better?

ChatGPT vs. human phishing and social engineering study: Who's better?

What Is Phishing Training?

What Is Phishing Training?

10 Phishing Training Lessons For Your Employees

10 Phishing Training Lessons For Your Employees

How much does phishing really cost businesses?

October 24, 2022

How much does phishing really cost businesses?

Gone Phishin' Volume 7: Early to mid October, 2022

October 12, 2022

Gone Phishin' Volume 7: Early to mid October, 2022

Infographic: Data breaches in the workplace

October 7, 2022

Infographic: Data breaches in the workplace

GTA 6 leaks and Uber hacked through social engineering

September 19, 2022

GTA 6 leaks and Uber hacked through social engineering

Gone Phishin' volume 2: late July 2022

Gone Phishin' volume 2: late July 2022

Gone Phishing: Biweekly Media Roundup #1

Gone Phishing: Biweekly Media Roundup #1

Phishing services are surprisingly cheap

Phishing services are surprisingly cheap

Infographic: Make-or-Break Phishing Metrics

Infographic: Make-or-Break Phishing Metrics

What are the top 10 costs of phishing?

December 13, 2021

What are the top 10 costs of phishing?

What is the real cost of phishing in 2021?

December 10, 2021

What is the real cost of phishing in 2021?

What is A Spear-Phishing Attack and How Do You Recognize It?

August 27, 2021

What is A Spear-Phishing Attack and How Do You Recognize It?

5 Ways to Prevent Business Email Compromise Attacks

August 12, 2021

5 Ways to Prevent Business Email Compromise Attacks

Gamification in security awareness training

Gamification in security awareness training

Are phishing tests enough to measure resilience?

Are phishing tests enough to measure resilience?

Cybersecurity in a hybrid work environment

Cybersecurity in a hybrid work environment

A guide to effective phishing training

February 8, 2021

A guide to effective phishing training

Two major phishing attacks hitting several enterprises

December 10, 2020

Two major phishing attacks hitting several enterprises

2,000+ reviews and counting: Hoxhunt continues as G2 category leader in Fall 2023 reports

September 13, 2023

2,000+ reviews and counting: Hoxhunt continues as G2 category leader in Fall 2023 reports

Track your human cyber-risk by calculating your security score

Track your human cyber-risk by calculating your security score

Are you minimizing your human cyber-risk? See how you compare to your industry peers

Are you minimizing your human cyber-risk? See how you compare to your industry peers

G2 Summer 2023 Awards recognize Hoxhunt as category leader

G2 Summer 2023 Awards recognize Hoxhunt as category leader

Make addressing reported threats easier with our new Incident Orchestration suite

Make addressing reported threats easier with our new Incident Orchestration suite

What you should do to reduce human risk

What you should do to reduce human risk

How human error impacts human risk in cybersecurity?

How human error impacts human risk in cybersecurity?

5 ways attackers can bypass two-factor authentication

5 ways attackers can bypass two-factor authentication

A Bug in G Suite Lets Attackers Spread Malware on Your Computer

December 20, 2019

A Bug in G Suite Lets Attackers Spread Malware on Your Computer

An Advanced Phishing Attack Using Google Subdomain

December 18, 2019

An Advanced Phishing Attack Using Google Subdomain

Threat feed week 47: Black Friday, cash awards, donations, and impersonations, including Adobe, the US Treasury Department, Meta Support, Facebook Ads, Microsoft, and more

November 24, 2023

Threat feed week 47: Black Friday, cash awards, donations, and impersonations, including Adobe, the US Treasury Department, Meta Support, Facebook Ads, Microsoft, and more

Threat feed week 46: Microsoft, QuickBooks, Outlook, Chase Bank impersonations, QR codes, and crypto phishing emails

November 17, 2023

Threat feed week 46: Microsoft, QuickBooks, Outlook, Chase Bank impersonations, QR codes, and crypto phishing emails

Threat feed week 45: Facebook, Google Forms, Verizon, Zoom, McAfee, Sharebox, Outlook, QuickBooks, HR, law firms, and telecommunications impersonations

November 10, 2023

Threat feed week 45: Facebook, Google Forms, Verizon, Zoom, McAfee, Sharebox, Outlook, QuickBooks, HR, law firms, and telecommunications impersonations

Threat feed week 44: Microsoft, DocuSign, McAfee, cryptocurrency, debt collections, postal service, telecommunication, banking, insurance, and police impersonations

November 3, 2023

Threat feed week 44: Microsoft, DocuSign, McAfee, cryptocurrency, debt collections, postal service, telecommunication, banking, insurance, and police impersonations

Threat feed week 43: DocuSign, Microsoft, QuickBooks, DHL, Geek Squad, MetaMask, Luxembourg police, and German postal service impersonations

October 27, 2023

Threat feed week 43: DocuSign, Microsoft, QuickBooks, DHL, Geek Squad, MetaMask, Luxembourg police, and German postal service impersonations