Elena Vasquez

Infostealer malware harvested more than 1.8 billion credentials in six months, and stolen session cookies now let attackers walk past MFA. The infection almost always starts with one human decision.

The Digital Omnibus postponed the AI Act's high-risk regime, but the Article 50 transparency duties applied on schedule from 2 August 2026. Chatbot disclosure, deepfake labeling, and emotion-recognition notices are now enforceable, and security teams have work to do.

empowsec delivers role-aware notifications across every actor in the platform - end users, admins, managers, and resellers - while letting users control preferences per notification type, and protecting critical alerts that cannot be switched off.

empowsec lets companies upload their own logo, set accent colors, and choose a light or dark theme so the training and reporting portal feels like a natural part of their own digital environment - improving employee trust and engagement from day one.

Thread hijacking lets attackers reply inside a real email conversation, with a familiar subject, history, and trusted sender. It defeats the 'unknown sender' instinct. Here is how to spot it.

Phishing has moved out of the inbox and into Microsoft Teams, Slack, and calendar invites — platforms employees trust by default. Here is how the attacks work and how to extend your defenses to cover them.

empowsec delivers training in each employee's own language: modules, courses, interactive lessons, and phishing templates all support per-language translations, with bulk import tooling and hreflang SEO for public pages.

empowsec training pages can include spoken narration generated by text-to-speech, available in both English and German, with multiple natural-sounding voice choices per page. Narration improves accessibility and supports learners who absorb information better by listening.

New hires are eager to please, unfamiliar with the norms, and disproportionately targeted by BEC and impersonation scams. Their first 90 days are the riskiest. Here is how to build security into onboarding from day one.

ClickFix tricks users into pasting a malicious command into their own computer under the guise of a CAPTCHA or 'fix this error' prompt. Here's why it bypasses your filters and how to train against it.

Bitdefender's Operation Road Trap research shows how toll, parking, and traffic-fine smishing has scaled across countries. Here is what employees and security teams should watch for.

Practical, role-specific cybersecurity checklists your organization can implement today — from daily habits for every employee to quarterly reviews for IT leadership.