Guides and strategies for building effective employee training programs that reduce human risk. Topics include security awareness curricula, training frequency, engagement tactics, and measuring program effectiveness across organizations of all sizes.
posts
The Breach That Started With a Single Click In 2023, MGM Resorts lost an estimated $100 million after a threat actor called Scattered Spider social-engineered an IT help desk employee with a phone call that lasted about ten minutes. The attacker didn't exploit a zero-day vulnerability. They didn&
In March 2020, a single employee at a mid-sized financial firm clicked a phishing email disguised as a COVID-19 HR update. That click led to credential theft, lateral movement across the network, and a ransomware deployment that cost the company $2.3 million in recovery and lost revenue. The employee
The Breach That Started With a Single Click In 2023, MGM Resorts lost an estimated $100 million after a threat actor social-engineered a help desk employee with a ten-minute phone call. The attacker found an employee on LinkedIn, called the IT service desk, and convinced them to reset credentials. That&
