Security awareness tips, industry news, and product updates.
September brings the year's biggest wave of new starters - and attackers time their CEO impersonation campaigns to match. Why the first 90 days are the most phishable window of any tenure, and how to protect the whole incoming cohort.
New global research shows 45% of SMBs suffered a cyber-incident in the past year, yet 75% feel confident in their resilience - and confidence actually rises among repeat victims. What the confidence paradox means for MSPs selling security awareness.
Every back-to-school season brings a surge of phishing aimed at schools, universities and students - and the lures land in corporate inboxes too. What the latest data shows and how to prepare your workforce before the wave peaks.
Attackers now purpose-build phishing for smartphones, where desktop email defenses cannot see and distracted users tap first. Research shows smishing drives 69.3 percent of mobile phishing - and iPhones are not the safe haven many assume.
US tax-authority phishing surged over 400 percent in 2026, and fake ELSTER refund mails are landing while German employees file their 2025 returns. The core lesson for staff: the Finanzamt never emails your refund.
Microsoft has documented phishing campaigns impersonating ChatGPT, Copilot, Claude, and DeepSeek - lures built for employees who use AI tools every day. It is a new template family your simulations should cover.
Phishing volume fell roughly 20 percent for two years running, but Zscaler's data shows attacks are now fewer, smarter, and aimed at routine business workflows. Falling numbers are not falling risk.
Germany's BSI warns travelers about fake booking confirmations as Check Point measures a 122 percent three-year surge in travel sector attacks. Vacation phishing hits personal devices that also carry corporate mail - making it a workplace problem.
Menlo Security's 2026 Browser Threat Report finds one in five clicked phishing links goes completely undetected by URL filtering, and a third of evasive threats come from 'trusted' domains. The data-driven case for trained humans as the last line of defense.
KnowBe4's 2026 industry benchmark puts the untrained phishing click rate at 33.2 percent - and shows a year of continuous training cuts it to 4.2 percent. Here is how to benchmark your own organization.
The empowsec mobile app brings assigned training, phishing debriefs, certificates, and a one-tap phishing report button to employees wherever they work - with push notifications keeping them on track.
empowsec publishes a free, searchable security glossary that defines common security and phishing terms in plain language, available in English and German, making it a practical reinforcement resource for onboarding and ongoing security awareness.