Employee cybersecurity training posts help organizations educate their workforce on recognizing threats and following security protocols. Content covers onboarding training modules, role-based instruction, ongoing reinforcement techniques, and methods for reducing human error in security incidents.
posts
In 2024, MGM Resorts lost an estimated $100 million after a threat actor social-engineered an IT help desk employee with a ten-minute phone call. The attacker didn't exploit a zero-day vulnerability. They didn't brute-force a password. They simply convinced a human being to hand over access.
The Breach That Started With a Single Click In 2023, MGM Resorts lost an estimated $100 million after a threat actor social-engineered an IT help desk employee with a ten-minute phone call. The attacker didn't exploit a zero-day vulnerability. They didn't brute-force a password. They simply
In 2019, PricewaterhouseCoopers launched a gamified cybersecurity exercise called Game of Threats — a real-time digital board game that pitted executives against simulated threat actors. The result? Decision-makers who'd never engaged with security training before were suddenly competing to outmaneuver ransomware campaigns and credential theft attacks. Engagement didn'
One Click Cost This Company $47 Million In 2023, Clorox disclosed a cybersecurity incident that disrupted operations for months and cost the company an estimated $49 million in recovery expenses. The attack reportedly began with social engineering — a threat actor tricking someone into giving up access. That's not
A 3-Minute Phone Call Cost One Company $37 Million In early 2024, a finance employee at a multinational firm joined a video call with what appeared to be the company's CFO and several colleagues. Every face on the screen was a deepfake. The employee transferred $25.6 million
A $1.3 Million Fine for Skipping Training In 2023, the U.S. Department of Health and Human Services fined Lafourche Medical Group $480,000 after a phishing attack compromised nearly 35,000 patient records. The investigation didn't just find a technical failure — it found the practice had
One Click Cost This Company $47 Million In 2023, a finance employee at Clorox received what looked like a routine vendor email. One click later, threat actors had a foothold inside the network. The resulting cyberattack disrupted operations for months and cost the company an estimated $356 million in damages
The Breach That Started With a Single Click In 2023, MGM Resorts lost an estimated $100 million after a threat actor called Scattered Spider social-engineered the company's IT help desk. The attacker didn't exploit a zero-day vulnerability. They didn't brute-force a password. They made
One Click Cost MGM Resorts Over $100 Million In September 2023, a social engineering attack against MGM Resorts International shut down slot machines, hotel key cards, and reservation systems across Las Vegas. The threat actors didn't exploit a zero-day vulnerability. They called the help desk, impersonated an employee,
The Click That Cost One Company $47 Million In 2023, MGM Resorts was brought to its knees — not by a sophisticated zero-day exploit, but by a single social engineering phone call that led to credential theft. The resulting breach caused an estimated $100 million in damages. And it started with
