Discover resources and strategies for building effective security awareness training programs. Posts cover curriculum design, engagement techniques, compliance requirements, and methods for measuring training impact to reduce human-related security incidents across organizations.
posts
In March 2025, the FBI's Internet Crime Complaint Center reported that cybercrime losses in the United States exceeded $16.6 billion in 2024 — a 33% increase over the prior year. That number didn't come from sophisticated nation-state attacks alone. It came from basic IT security failures:
In 2023, the FBI's Internet Crime Complaint Center received over 880,000 complaints with potential losses exceeding $12.5 billion — a 22% increase in losses over the previous year. That tidal wave of cybercrime isn't slowing down in 2025. It's accelerating. And every single
The Breach That Rewrote the Rules of Computer Security In February 2024, Change Healthcare — one of the largest health payment processors in the United States — suffered a ransomware attack that disrupted claims processing for hospitals, pharmacies, and clinics across the country. UnitedHealth Group, its parent company, disclosed in its SEC
In January 2023, T-Mobile disclosed that a threat actor exploited an API vulnerability to steal personal data on 37 million customer accounts. Not through some exotic zero-day — through a misconfigured web API that had been leaking data since November 2022. That's two months of silent hemorrhaging before anyone
The Breach That Changed How I Think About Cyber Security In February 2025, the FBI's Internet Crime Complaint Center reported that losses from cybercrime exceeded $16 billion in 2024 — a record that shattered the previous year's numbers. That single statistic rewired how I approach cyber security
A Single Click Cost One Hospital Chain $100 Million In 2024, Change Healthcare — the largest health payment processor in the United States — was hit by the ALPHV/BlackCat ransomware group. The attack disrupted pharmacy operations, delayed insurance claims, and ultimately cost UnitedHealth Group an estimated $872 million in the first
The Breach That Started With a Help Desk Call In September 2023, MGM Resorts lost an estimated $100 million after a threat actor social-engineered their way through a help desk phone call. The attacker didn't need a zero-day exploit. They didn't crack an encryption algorithm. They
In January 2025, the Verizon Data Breach Investigations Report team was already tracking a sharp rise in cloud-specific intrusions — a trend that accelerated throughout the year. By mid-2025, roughly 45% of all breaches involved cloud assets, up significantly from prior years. If your organization moved to the cloud and assumed
In March 2025, the FBI's Internet Crime Complaint Center reported that Americans lost over $16 billion to cybercrime in 2024 — a 33% increase from the prior year. That number isn't abstract. It represents real people and real businesses that thought their defenses were good enough. I&
In March 2025, the FBI's Internet Crime Complaint Center reported that Americans lost over $16 billion to cybercrime in 2024 — the highest figure ever recorded. Every single one of those victims had some form of computer security software installed. Antivirus was running. Firewalls were configured. And yet, the
