Security awareness tips, industry news, and product updates.
Practical, role-specific cybersecurity checklists your organization can implement today — from daily habits for every employee to quarterly reviews for IT leadership.
A Chinese national posed as U.S.-based researchers for years, using spear-phishing emails to trick NASA employees and military personnel into handing over restricted aerospace software. The case is a masterclass in why identity verification matters.
Cybercriminals are spoofing Paperless Post, Evite, and Punchbowl to send fake party invitations that exploit your fear of missing out. Here's how the scam works and how to protect yourself.
Security awareness training is one of the fastest-growing segments in cybersecurity. The empowsec affiliate program lets you earn generous recurring commissions by referring organizations to a platform they genuinely need.
QR code phishing has evolved far beyond a simple scan-and-steal. Split codes, Unicode fakes, CAPTCHA gates, and state-sponsored campaigns are rewriting the rulebook — and most security stacks still can't read a QR code.
A three-day intrusion at North Texas Behavioral Health Authority exposed 285,086 patient records. Here's what went wrong and how healthcare teams can harden their HIPAA defenses.
Evaluating security awareness platforms? Here's a clear-eyed comparison of empowsec and KnowBe4 across pricing, features, white-label capabilities, and the kinds of organizations each serves best.
A new criminal toolkit called ATHR bundles AI voice agents, phishing emails, and real-time credential harvesting into a single browser-based platform. Here's how vishing-as-a-service is reshaping social engineering and what your organization can do about it.
Hackers breached Booking.com and are already using stolen reservation data to launch hyper-targeted phishing attacks via email, WhatsApp, and phone. Here's what organizations need to know and how to prepare employees for these real-world social engineering tactics.
The FBI just took down a global phishing-as-a-service platform responsible for $20 million in fraud. Here's what this operation reveals about modern phishing threats and why workforce education is the most effective countermeasure.
New academic research finds that training everyone after a phishing simulation — not just the employees who clicked — builds stronger, longer-lasting defences. Here's how empowsec's new Debrief and Teachable Moments features put that science into practice.
A cyberattack left Foster City, California in a state of emergency for over a week. Here's how it likely happened, why small governments are prime targets, and what municipalities can do to prevent becoming the next headline.