Blog

A Wall Street Journal article drawing on the study “Understanding the Efficacy of Phishing Training in Practice” questions whether phishing simulations and awareness training lead to meaningful risk reduction. A growing body of empirical research shows that well-designed awareness programs do improve real-world cyber risk behavior; what often fails is a narrow interpretation of what awareness is, how it should be embedded and how success should be measured.

Modern attacks happen in seconds, but awareness teams often work in days or weeks. CYBERDISE 2025 brings together AI reconnaissance, autonomous campaign components, multi-organizational management and a revamped content ecosystem — here are the features built this year.

How many phishing simulations to run and how often users should face cybersecurity eLearning is a recurring question in awareness programs – and far from academic. A sensitization effect begins to crumble after about three months, yet it would be dangerous to derive simple, universally applicable rules from that.

Like any other project, a cybersecurity awareness program can get off to a very bumpy start when it begins with an inappropriate mindset and management fails to recognize the value of awareness. We examined the mistakes and false expectations documented in a USENIX study and compared them with our own experience.

Phishing emails are becoming harder to detect, even for humans. A recent study tested various large language models (LLMs) for their ability to recognize malicious intent in emails and revealed significant differences in performance.

Reverse pitching turns the tables: investors, business angels and VCs apply to startup founders to be allowed to invest in their companies. Whether that is a good idea has two answers: no and yes.

After hundreds of conversations with investors over the past 15 years, the author turns the pitch around: five qualities worth wanting in an investor, and five to be wary of.

Product-market fit only makes things easier if you’ve got the rest right. Just having something on offer that people want does not guarantee business success.

October marks Cybersecurity Awareness Month, a time to remember that people remain the weakest link in cyber defense. This article traces how security awareness has evolved and what building a strong cybersecurity culture has in common with building a winning hockey team.

What an entrepreneur with two exits learned from the experiences of a tech entrepreneur who has already had two exits. The takeaways range from team composition and storytelling to vision and relationships with the US.

Despite comprehensive security awareness training, many organizations still have cybersecurity breaches resulting from human error. This article is about the gap between risk attitude (knowing what is risky) and risk behavior (actually acting securely).

The IBM Cost of a Data Breach Report has been published every year for two decades. It’s often read for the numbers, but this year’s report says something more fundamental about cybersecurity awareness.