Articles by Sarah Mitchell
Before SSO or automated onboarding can trust an email domain, empowsec asks you to prove you own it - with a DNS TXT record or a hosted verification file, checked in seconds from the settings page.
Every other EU AI Act headline in 2026 has been about delay, but the Article 4 AI-literacy duty was never postponed. It has applied since February 2025, and from early August 2026 national authorities gain the powers to enforce it. Here is how to build a defensible program.
The Luna Moth extortion crew escalated sharply in May and June 2026: an FBI FLASH alert, a leak site listing roughly 100 victims, reported $20 million ransom demands and attackers walking into law firm offices in person.
Realistic phishing simulations only work if the emails actually arrive. empowsec provisions a dedicated, fully authenticated sending domain for every company in one click - SPF, DKIM and DMARC included - and tells you exactly which IPs to allow-list.
empowsec publishes a free, searchable security glossary that defines common security and phishing terms in plain language, available in English and German, making it a practical reinforcement resource for onboarding and ongoing security awareness.
empowsec offers eight free public security tools - no account required. From password strength testing to live email authentication checks, these tools give anyone a quick way to spot weaknesses and illustrate the kind of awareness empowsec builds across an entire organization.
DORA is best known for ICT risk and incident reporting, but it also makes security awareness training a compulsory module for staff and management. Here is what financial entities must do, and how to evidence it.
A trusted supplier emails to say their bank details have changed. Pay the new account and the money is gone. Here is how vendor email compromise drives invoice fraud — and the verification controls that stop it.
The FBI's 2025 Internet Crime Report tallies a record $20.9 billion in losses, with business email compromise close to the top. Here's what the numbers mean and the controls that actually help.
Part 2 of empowsec's interactive page types covers the hands-on practice formats: click-to-match, ordering, fill in the blanks, email red-flag finder, and chat simulation - each designed to make learners practice the skill, not just read about it.
empowsec training is built from interactive page types - not static slides. Part 1 introduces seven of them, from simple info pages and accordions to graded quizzes, scenarios, and drag-to-match exercises.
A phishing simulation without a debrief is a test with no feedback. empowsec debriefs close that loop by explaining exactly what participants should have spotted - in their own language, at the right time.