Security awareness tips, industry news, and product updates.
empowsec lets companies and resellers fork any global course into an editable copy - quizzes, interactive pages, and settings included - then sync with upstream updates or delete the fork to revert, while learners always see the most specific version.
empowsec reseller analytics roll every client company into one view: training completion, phishing click, open, report, and reply rates, per-company risk, and CSV or PDF exports - the numbers an MSP needs for a QBR without logging into thirty tenants.
The Luna Moth extortion crew escalated sharply in May and June 2026: an FBI FLASH alert, a leak site listing roughly 100 victims, reported $20 million ransom demands and attackers walking into law firm offices in person.
The BSI's final grace deadline for NIS2 registration expired on 31 July 2026 with thousands of in-scope German entities still unregistered. Germany's NIS2 regime now enters its enforcement phase, and registration failures alone can draw fines of up to EUR 500,000.
empowsec lets company admins build custom roles with granular permissions, renders a dashboard with only the tabs each user may see, and gives reseller teams an equivalent permission system - so nobody needs full admin access just to do one job.
US tax-authority phishing surged over 400 percent in 2026, and fake ELSTER refund mails are landing while German employees file their 2025 returns. The core lesson for staff: the Finanzamt never emails your refund.
Microsoft has documented phishing campaigns impersonating ChatGPT, Copilot, Claude, and DeepSeek - lures built for employees who use AI tools every day. It is a new template family your simulations should cover.
Compliance frameworks expect regular, evidenced security training - but manual re-enrollment does not scale. empowsec automation rules enroll new hires automatically and re-run courses every 3, 6, 12 or 24 months, hands-off.
Infostealer malware harvested more than 1.8 billion credentials in six months, and stolen session cookies now let attackers walk past MFA. The infection almost always starts with one human decision.
Realistic phishing simulations only work if the emails actually arrive. empowsec provisions a dedicated, fully authenticated sending domain for every company in one click - SPF, DKIM and DMARC included - and tells you exactly which IPs to allow-list.
Phishing volume fell roughly 20 percent for two years running, but Zscaler's data shows attacks are now fewer, smarter, and aimed at routine business workflows. Falling numbers are not falling risk.
The Digital Omnibus postponed the AI Act's high-risk regime, but the Article 50 transparency duties applied on schedule from 2 August 2026. Chatbot disclosure, deepfake labeling, and emotion-recognition notices are now enforceable, and security teams have work to do.