Resources and strategies for building effective cybersecurity awareness training programs. Covers curriculum design, phishing simulations, measuring employee readiness, compliance requirements, and techniques for fostering a security-first culture across organizations of all sizes.
posts
In 2024, MGM Resorts lost an estimated $100 million after a threat actor social-engineered a help desk employee with a ten-minute phone call. The attacker didn't exploit a zero-day vulnerability. They didn't brute-force a password. They simply called IT support, impersonated an employee they found on
In January 2022, the Red Cross disclosed that a cyberattack compromised the personal data of over 515,000 vulnerable people — victims of conflict, missing persons, detainees. The attack vector? A threat actor exploiting an unpatched vulnerability, combined with social engineering techniques that went undetected for weeks. It's a
The Breach That Proved "Secure Enough" Is a Myth In 2023, MGM Resorts lost an estimated $100 million after a social engineering phone call — just one phone call — gave threat actors the foothold they needed. MGM had firewalls. They had endpoint protection. They had a security team. What
