These articles guide organizations through designing, launching, and measuring security awareness training programs. Topics include curriculum development, phishing simulations, compliance requirements, engagement strategies, and metrics that demonstrate program effectiveness to leadership.
posts
The Breach That Started With a Single Click In 2023, MGM Resorts lost an estimated $100 million after a threat actor called Scattered Spider social-engineered a help desk employee. One phone call. One manipulated employee. That's all it took to bring a multi-billion-dollar company to its knees. The
In March 2020, a single employee at Magellan Health clicked a phishing email that impersonated an executive. The result: a ransomware attack that exposed personal data of over 365,000 individuals. The attacker didn't exploit a zero-day vulnerability. They didn't brute-force a firewall. They sent an
In 2023, MGM Resorts lost an estimated $100 million after a threat actor social-engineered the company's IT help desk with a ten-minute phone call. The attacker didn't exploit a zero-day. They didn't brute-force a password. They simply convinced a human being to hand over
