Security awareness tips, industry news, and product updates.
Verizon's 2026 Data Breach Investigations Report puts the human element in 62% of breaches and confirms attackers are pivoting to mobile and the browser. Here's what it means for your awareness program.
98% of organizations report unsanctioned AI use, and most have no policy to manage it. Shadow AI has become a top insider data-loss risk — and it's a security awareness problem.
empowsec training is built from interactive page types - not static slides. Part 1 introduces seven of them, from simple info pages and accordions to graded quizzes, scenarios, and drag-to-match exercises.
Scattered Spider doesn't hack your MFA — it calls your help desk and talks an agent into resetting it. Here's how help desk social engineering works and how to lock the door.
A real breach is the worst time to discover that no one knows who decides whether to pay a ransom. Tabletop exercises expose those gaps in a conference room instead of a crisis.
A phishing simulation without a debrief is a test with no feedback. empowsec debriefs close that loop by explaining exactly what participants should have spotted - in their own language, at the right time.
Click rate is the metric every program reports and the one that misleads most. Report rate, time-to-report, repeat-clicker reduction and the resilience ratio tell the real story. Here is how to measure and present it.
Annual click-through training checks a compliance box but rarely changes behavior. Human Risk Management replaces it with continuous, data-driven, personalized risk reduction. Here is what that shift looks like in practice.
empowsec tracks every step of a simulated phishing attack - from the pixel that records an open to the fake login form that records a credential submission - and turns each event into a learning opportunity.
One click on a report button can turn every employee into a sensor and shrink an attacker's dwell time to minutes. Here is how to build the process and the blameless culture that make reporting reflexive.
New hires are eager to please, unfamiliar with the norms, and disproportionately targeted by BEC and impersonation scams. Their first 90 days are the riskiest. Here is how to build security into onboarding from day one.
One annual phishing test tells you where your employees stood twelve months ago. Recurring, automated phishing simulation in empowsec gives you a continuous, accurate picture of where they stand today.