Security awareness tips, industry news, and product updates.
Google has filed a RICO lawsuit against the AI-powered 'Outsider' smishing network, exposing an industrialized text-scam economy that rents for 88 dollars a week. Here is what the case means for employee awareness on mobile.
Detailed out-of-office auto-replies hand attackers absence dates, deputy contacts, and reporting lines - exactly when SOC staffing is thinnest. How to write OOO messages that say less, and why August deserves its own simulation.
Germany's BSI warns travelers about fake booking confirmations as Check Point measures a 122 percent three-year surge in travel sector attacks. Vacation phishing hits personal devices that also carry corporate mail - making it a workplace problem.
Menlo Security's 2026 Browser Threat Report finds one in five clicked phishing links goes completely undetected by URL filtering, and a third of evasive threats come from 'trusted' domains. The data-driven case for trained humans as the last line of defense.
When an employee clicks a simulated phishing link, empowsec turns the mistake into an instant micro-lesson: a Teachable Moment page that explains the exact red flags they just missed, at the moment they are most receptive to learning.
A vishing crew is calling employees as fake Microsoft IT staff and walking them through a bogus Entra passkey enrollment - then registering the attacker's own passkey for persistent access. The weak point is the enrollment moment, not the passkey.
KnowBe4's 2026 industry benchmark puts the untrained phishing click rate at 33.2 percent - and shows a year of continuous training cuts it to 4.2 percent. Here is how to benchmark your own organization.
empowsec maintains comprehensive audit logs, records every impersonation session, and provides a compliant account deletion workflow - giving organizations the accountability, traceability, and GDPR evidence they need.
empowsec bundles features into plans, charges seat-based billing through Stripe, and reconciles seat overages with a transparent true-up process - so your organization can grow without hard blocks or billing surprises.
empowsec delivers role-aware notifications across every actor in the platform - end users, admins, managers, and resellers - while letting users control preferences per notification type, and protecting critical alerts that cannot be switched off.
The empowsec mobile app brings assigned training, phishing debriefs, certificates, and a one-tap phishing report button to employees wherever they work - with push notifications keeping them on track.
empowsec provides a versioned REST API and webhooks so security data flows automatically into the HRIS, SIEM, and BI tools your team already uses - no manual exports required.