News

empowsec publishes a free, searchable security glossary that defines common security and phishing terms in plain language, available in English and German, making it a practical reinforcement resource for onboarding and ongoing security awareness.

empowsec offers eight free public security tools - no account required. From password strength testing to live email authentication checks, these tools give anyone a quick way to spot weaknesses and illustrate the kind of awareness empowsec builds across an entire organization.

North Korean operatives are using deepfakes and synthetic identities to get hired at Western firms. Unit 42 built a convincing fake candidate in about 70 minutes. Here is how to vet remote hires.

Annual compliance training looks tidy on a spreadsheet, but the forgetting curve erases most of it within weeks. Here is why continuous, adaptive security awareness training drives durable behavior change.

empowsec makes it easy to add employees one at a time or in bulk via CSV, organize them into departments and groups, assign granular roles, and ensure every new user receives a smooth onboarding experience with welcome emails and registration reminders.

In 2026, no MFA can mean no coverage, and underwriters now want documented awareness training and phishing simulations too. Here is what insurers look for and how to evidence it.

DORA is best known for ICT risk and incident reporting, but it also makes security awareness training a compulsory module for staff and management. Here is what financial entities must do, and how to evidence it.

Reused passwords plus breached credentials are the fuel behind account takeover. Here is how to roll out password managers and build credential hygiene that actually holds across your organization.

empowsec lets you organize employees into departments, give managers scoped visibility into their team's training and phishing results, and deliver weekly compliance digests so nothing slips through the cracks.

ISO/IEC 27001:2022 expects more than a once-a-year slideshow. Here is what the standard actually requires for security awareness, and how to prove it to your auditor.

Compromise one MSP and you can reach every client behind it. Here is why managed service providers are prime ransomware targets, and how to harden against it.

When employees report suspicious emails through the empowsec Outlook or Gmail add-in, those reports land in an admin review queue where security teams can classify each one and build real threat intelligence from what is actually reaching inboxes.