Articles by Thomas Eriksson
New global research shows 45% of SMBs suffered a cyber-incident in the past year, yet 75% feel confident in their resilience - and confidence actually rises among repeat victims. What the confidence paradox means for MSPs selling security awareness.
Germany's new BSIG makes cybersecurity training a personal, non-delegable duty for the management of regulated entities, backed by personal liability for oversight failures. The BSI has now spelled out what the training must cover and recommends an annual cadence.
empowsec reseller analytics roll every client company into one view: training completion, phishing click, open, report, and reply rates, per-company risk, and CSV or PDF exports - the numbers an MSP needs for a QBR without logging into thirty tenants.
Microsoft has documented phishing campaigns impersonating ChatGPT, Copilot, Claude, and DeepSeek - lures built for employees who use AI tools every day. It is a new template family your simulations should cover.
Compromise one MSP and you can reach every client behind it. Here is why managed service providers are prime ransomware targets, and how to harden against it.
"Are you available? I need a quick favor." It's the opening line of a gift card scam impersonating your CEO - low-tech, high-volume, and aimed at new and junior staff. Here's the pattern and the one rule that stops it.
One click on a report button can turn every employee into a sensor and shrink an attacker's dwell time to minutes. Here is how to build the process and the blameless culture that make reporting reflexive.
A cyberattack left Foster City, California in a state of emergency for over a week. Here's how it likely happened, why small governments are prime targets, and what municipalities can do to prevent becoming the next headline.