Security awareness tips, industry news, and product updates.
Every back-to-school season brings a surge of phishing aimed at schools, universities and students - and the lures land in corporate inboxes too. What the latest data shows and how to prepare your workforce before the wave peaks.
empowsec gives MSPs a central seat pool with per-company and bulk allocation, hard, soft, and unlimited limits, usage syncing, and a dedicated audit trail - so seat management keeps pace with changing client headcounts.
NYDFS has told regulated financial entities, in writing, to train staff against help-desk vishing attacks. Combined with the fully effective Part 500 amendment and a record enforcement run, targeted social-engineering training is now a supervisory expectation in New York.
Push bombing turns the employee habit of tapping 'Approve' into a breach vector. The fix pairs number matching and phishing-resistant MFA with one trained rule: never approve a prompt you did not trigger.
Germany's new BSIG makes cybersecurity training a personal, non-delegable duty for the management of regulated entities, backed by personal liability for oversight failures. The BSI has now spelled out what the training must cover and recommends an annual cadence.
empowsec tracks storage per company or reseller against an included allotment, snapshots usage every billing period, and bills overage transparently on peak usage - with a 12-month history and per-type breakdown right in the dashboard.
Attackers now purpose-build phishing for smartphones, where desktop email defenses cannot see and distracted users tap first. Research shows smishing drives 69.3 percent of mobile phishing - and iPhones are not the safe haven many assume.
The empowsec learner dashboard gives every employee a personal training overview: pending and overdue assignments, per-course progress, and recent completions - so nobody has to guess what to do next.
Every other EU AI Act headline in 2026 has been about delay, but the Article 4 AI-literacy duty was never postponed. It has applied since February 2025, and from early August 2026 national authorities gain the powers to enforce it. Here is how to build a defensible program.
empowsec lets companies serve the training portal from their own domain via a simple CNAME, with guided DNS verification, live status badges, and a secure cross-domain login handoff - so employees always see an address they recognize and trust.
New 2026 research shows malicious SVG attachments have grown fifty-fold, becoming the third most common malicious attachment type. Here is why an image file can phish you - and what to change in your filters, policies and simulations.
New 2026 survey data shows one in four Americans received an AI deepfake voice call in the past year - and nearly as many doubt they could spot one. The defense is a policy, not an ear.