Discover resources and strategies for building effective security awareness training programs. Posts cover curriculum design, engagement techniques, compliance requirements, and methods for measuring training impact to reduce human-related security incidents across organizations.
posts
A $4.88 Million Problem That Starts With One Email In 2024, the average cost of a data breach hit $4.88 million globally, according to IBM's Cost of a Data Breach Report. The number one initial attack vector? Phishing. Not sophisticated zero-day exploits. Not nation-state hackers tunneling
In 2024, IBM's Cost of a Data Breach Report pegged the global average cost of a single breach at $4.88 million — the highest figure ever recorded. And yet, when I talk to business owners after an incident, most of them ask the same question: How did this
A Single Lost Phone Cost This Company $4.9 Million In 2023, a healthcare organization reported a breach to HHS that started with one unencrypted smartphone left in an airport lounge. Patient records, internal credentials, VPN configurations — all exposed. The settlement and remediation costs were staggering. And here's
A Single Stolen Password Shut Down Half the East Coast's Fuel In May 2021, a single compromised VPN credential gave a threat actor access to Colonial Pipeline's network. The ransomware attack that followed forced the company to shut down 5,500 miles of pipeline, triggered fuel
The Receptionist Who Stopped a Six-Figure Wire Fraud In 2023, a mid-size accounting firm in Ohio nearly lost $380,000 because a senior partner clicked a link in a spoofed email from a "client." The person who caught it wasn't a security analyst or an IT
A Single Email Cost This Company $47 Million In 2016, FACC, an Austrian aerospace parts manufacturer, lost €42 million (roughly $47 million USD) after an employee wired funds based on instructions that appeared to come from the CEO. The email was fake. The money vanished into accounts controlled by threat
A Single Email Cost This Company $100 Million In 2019, Toyota Boshoku Corporation — a major Toyota parts supplier — lost $37 million after employees wired funds to accounts controlled by attackers who impersonated a business partner via email. Facebook and Google collectively lost over $100 million to a Lithuanian man who
In 2023, the FBI's Internet Crime Complaint Center received over 880,000 complaints with potential losses exceeding $12.5 billion — and small businesses absorbed a disproportionate share of that damage. I've worked with companies of 15 employees that lost six figures to a single business email
3,389 Reasons to Worry About Your Open RDP Ports In 2023, the FBI's IC3 received over 880,000 cybercrime complaints with losses exceeding $12.5 billion — and a staggering number of those incidents traced back to compromised Remote Desktop Protocol (RDP) connections. I've personally responded
A $4.88 Million Question Most People Answer Wrong In 2024, the average cost of a data breach hit $4.88 million globally, according to IBM's Cost of a Data Breach Report. That number isn't abstract. It's real money drained from real organizations — many
