Discover resources and best practices for phishing awareness training programs that teach employees and individuals to recognize and report phishing attempts. These articles cover simulation exercises, training metrics, and building a phishing-resistant culture.
posts
In December 2020, FireEye disclosed one of the most sophisticated supply chain attacks in history — the SolarWinds breach. Threat actors compromised a trusted software update, slipping past automated defenses at over 18,000 organizations including multiple U.S. government agencies. But here's the detail that gets buried: investigators
In March 2020, a single employee at a mid-sized financial firm clicked a phishing email disguised as a COVID-19 HR update. That click led to credential theft, lateral movement across the network, and a ransomware deployment that cost the company $2.3 million in recovery and lost revenue. The employee
Your Search for a Phish Setlist Could Land You on a Hacker's Hook Last summer, a colleague of mine — a die-hard Phish fan — searched for a phish setlist from a recent show at Madison Square Garden. He clicked what looked like a legitimate fan site. Within seconds, his
A Phone Call From "Google" That Wasn't Google at All In late 2024, a Gmail user received a phone call from what appeared to be a legitimate Google support number. The caller warned of suspicious account activity, walked them through a fake recovery process, and captured
The District That Lost 81,000 Student Records in a Single Weekend In 2023, the Minneapolis Public Schools district suffered a massive ransomware attack that exposed over 300,000 files — including sensitive records for tens of thousands of students. Psychological evaluations, sexual assault reports, Social Security numbers, and disciplinary records
