Request a demo

Cybersecurity Education

Read articles about security awareness, risk management, behavior change, and more

Featured Article

Ultimate QR Code Phishing (Quishing) Prevention Guide: Here's What the Research Says

How quishing/QR code phishing is being used in attacks, what these threats look like in the wild and best practices for avoiding them.

Read the article
Topics
Topics:
All
Security Awareness
Risk Management
Behavior Change
Threats
Vulnerabilities

What is an SOC Report? And Does your Organization Need One?

What is an SOC report? What are the different types of SOC reports available? How do you obtain one? Your questions answered.

Cyber Awareness Training: How to Actually Change Behavior (+ Reduce Risk)

The flaws of typical cyber awareness training and how you can start to carry out training that genuinely changes employee behavior.

Phishing Simulation: How to Maximize Results (Best Practices and Strategies 2024)

Here are the attacks you should be simulating, the metrics worth tracking and best practices for getting the most out of your phishing simulation program.

Invoice Fraud 101: How to Identify Fake Invoices in 9 Quick Steps

Your guide to the kinds of threats out there, what to look out for and the measures you can take to prevent invoice fraud.

How Yu-kai Chou's Gamification Framework Revolutionized Security Awareness Training

Here's how integrating Yu-kai Chou's Octalysis Gamification and Behavioral Design Framework into cybersecurity training can dramatically improve user engagement and resilience.

The 10 Phishing Red Flags Your Employees Need to Know (2024)

Here are the 10 major phishing red flags that your employees should already be aware of.

Phishing Simulation: How to Maximize Results (Best Practices and Strategies 2024)

Here are the attacks you should be simulating, the metrics worth tracking and best practices for getting the most out of your phishing simulation program.

4 Essential Phishing Metrics to Reduce Risk

What are the 4 essential phishing metrics of an effective training program? It's not what you think. Spoiler: failure rate is not amongst them.

How Can You Protect Your Organization on Social Networking Sites: 9 Simple Steps

The ultimate guide to protecting your organization on social networking sites. How to build your social media security policies and procedures to measurably reduce risk.

Essential Email Security Best Practices: Security Awareness Manager's Playbook (2024)

This playbook will guide you through the essential email security best practices you need to know to educate employees, mitigate risks, and protect your organization.

MFA Fatigue Attacks: Ultimate Prevention Guide 2024

In the guide below we'll break down exactly what you need to know about MFA fatigue, how to spot attacks as well as the latest security practices for protecting your organization.

Creating a Company Culture for Security: 6 Step Actionable Strategy

Your essential guide to building a robust security culture. How to implement effective training, policies, and recognition systems to mitigate human cyber risk.

What is an SOC Report? And Does your Organization Need One?

What is an SOC report? What are the different types of SOC reports available? How do you obtain one? Your questions answered.

How to Reduce Human Risk: Best Practices for Security Teams

We'll look into the behaviors to watch out for, how to assess risk and all the strategies you need to tangibly reduce human risk across your organization.

The difference between a security awareness manager and a human risk manager

The Human Risk Manager controls the process of identifying, evaluating, and mitigating the cybersecurity risks associated with people. 

NIS 2 Checklist CxO and Board of Directors

This NIS 2 Checklist gives the compliance basics for the CxO and Board of Directors to satisfy this European cybersecurity regulation.

Top 10 costs of phishing

The top 10 costs of phishing are direct, indirect, and far reaching.

Why building a strong security culture is vital for reducing human risk – Hoxhunt

Noora Ahmed-Moshe's presentation to an exclusive group of CIOs at Kocho View in London explains why building a security culture is vital to reducing human risk.

Cyber Awareness Training: How to Actually Change Behavior (+ Reduce Risk)

The flaws of typical cyber awareness training and how you can start to carry out training that genuinely changes employee behavior.

How Yu-kai Chou's Gamification Framework Revolutionized Security Awareness Training

Here's how integrating Yu-kai Chou's Octalysis Gamification and Behavioral Design Framework into cybersecurity training can dramatically improve user engagement and resilience.

Phishing Simulation Training: How it Works + Results

All the information you need to make an informed decision on phishing simulation training - the mechanics, realistic results you can expect to achieve and maximizing ROI.

How to Build a Human Firewall (Essential Guide)

Want to start building your organization's human firewall but not sure where to start? Here's our actionable guide to shore up your defenses and reduce human risk.

How to Influence Security Behaviors: Insights from "The Human Element" Webinar Series

Maxime Cartier recaps the webinar series, "The Human Element: The Science Behind Influencing Security Behaviors" and key learnings of the intricacies of human behavior in reducing cybersecurity risk.

Measuring True Risk is the key to unlocking human risk management and cybersecurity behavior change

The differences between old school awareness training and modern security behavior change are revealed in measuring true risk managing human risk

Ultimate QR Code Phishing (Quishing) Prevention Guide: Here's What the Research Says

How quishing/QR code phishing is being used in attacks, what these threats look like in the wild and best practices for avoiding them.

Invoice Fraud 101: How to Identify Fake Invoices in 9 Quick Steps

Your guide to the kinds of threats out there, what to look out for and the measures you can take to prevent invoice fraud.

The 10 Phishing Red Flags Your Employees Need to Know (2024)

Here are the 10 major phishing red flags that your employees should already be aware of.

Spear Phishing vs Phishing (No-Nonsense Guide)

Think you know everything about spear-phishing vs phishing? Here's the different techniques and prevention measures you need to know to prevent both kinds of attacks.

Whaling Phishing: The Definitive Defense Guide

Everything you need to protect your organization from whaling phishing - how whaling works, how to spot attacks and the best practices for preventing whaling attacks.

Phishing Training For Employees: Top 10 Threats You Need to Cover

Want phishing training for employees that actually reduces human risk? Here's your ultimate guide to the most pervasive threats out there right now.

Report: SaaS permissions leave huge amounts of data exposed

Your SaaS suite is leaving your backdoor open. Here's how to fix it.

Log4J Log4Shell vulnerability explained

Log4J Log4Shell vulnerability explained to help you understand what it is and how to stay protected

Default Guest settings Azure AD

A security vulnerability was recently reported in the default guest permissions of Microsoft Azure Active Directory. Here’s how to fix it and stay safe from attackers.

External email warning banner phish

This phishing email was sent from outside the organization but is replacing the Caution! External Sender banner with a safe sender banner.

Update regarding the Apple iOS Mail App Vulnerability

Apple just recently confirmed the most significant vulnerability in iOS history after ZecOps made a public announcement about their discovery of a security flaw.

iOS Mail App Security Flaw

According to security researchers, the iOS mail app, which is the email client that can be found on most Apple iPhones and iPads, has a severe security flaw making it vulnerable to attacks.

Social Engineering Training Explained (Essential Guide)

Your ultimate guide to the process behind social engineering training and all of the tips and know-how you need to ensure your training successfully changes behavior.

Advertisers Beware—How Scammers Are Getting Into Your Ad Accounts

From Spear-Phishing, to Credential Harvesting, To Possible Ad Fraud. Keep Reading To Find Out How This Story Unfolded and How You Can Avoid Getting Caught.

Social engineers are targeting social media accounts

We're seeing an uptick in social engineers targeting social media accounts

The good, the bad, and the ugly about browser fingerprinting

Now that cookies are on their way out, a much sneakier way of identifying you is on its way in.

This '90s internet throwback is the latest hacking trend

Years later, pop-ups are back, this time serving a different purpose... stealing your info.

How to prevent crypto wallet phishing

The more digital money you make, the more digital problems you get. Here's some tips to keep your crypto wallet safe.

See also :
Resource Hub Home
Research
Stories
News