Phishing training exercises are a staple of enterprise security strategy, but research shows current approaches aren’t all that effective. Phishing is a tried-and-true attack vector. These attacks ...

Phishing scams strike victims with alarming regularity. The Anti-Phishing Working Group, which collates information from various bodies worldwide, reported nearly a million phishing attacks in the ...

Current anti-phishing training programs have little to no impact. Training methods lack what human learners need: engagement. These programs must be revamped and combined with supportive technologies.

Security by design has long been something of a holy grail for cybersecurity professionals. It’s a simple concept: ensure products are designed to be as secure as possible in order to minimize the ...

It always takes two for a phishing attack to work – an attacker to send the bait and an insider to take it. Almost every organization carries out some form of security and awareness training (SAT) to ...

According to a recent study by SANS, 95% of all attacks on enterprise networks are the result of successful spear phishing. Other research by Ponemon Institute shows that the average loss on such ...

Melissa, a young software engineer at a fast-growing tech startup, often worked late into the night, but this proved to be her undoing. One evening, after a long day spent debugging code, she didn’t ...

Researchers have tested the effectiveness of various phishing training courses in a study involving 19,000 test subjects. The result: training courses help less than expected. A large-scale study on ...

Security teams have invested heavily in email protection, endpoint security and identity controls, but Fortra's latest research suggests one challenge remains difficult to solve: users.

PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing. Phishing scams strike victims with alarming ...