Skip to content

Topic: awareness

Split scene: on one side an AI connects personalised lures into fast, targeted attacks; on the other an awareness team uses AI only to produce slides and videos
aiAI in Security Awareness: Why 6 in 10 Teams Hand Attackers the Edge

Attackers are already using AI to research targets, improve language and adapt social engineering at speed. The 2026 SANS Security Awareness & Culture Report shows that 58% of awareness teams have not moved beyond first experiments, and most of the rest use AI to produce content rather than to change behavior.

Screenshots of the two CYBERDISE Human Defense Month 2026 games: Shoot the Weak Passwords in space and Spot the Unsafe Practices in an office
awarenessTwo Free Security Awareness Games for Human Defense Month 2026

Spot unsafe behaviour. Shoot weak passwords. Two free security awareness games for Human Defense Month 2026, in English and German, to play online or import into your LMS. Because not every training needs to feel like training.

An organisation chart of a security team: 49 people working on technology and a single person responsible for the human side of cybersecurity
awarenessYour CISO-to-Awareness Ratio Is Broken. It's Sabotaging Your Defense

Boards spend most of their cyber time on technology. One number from the 2026 SANS Security Awareness & Culture Report works surprisingly well as a management indicator: a cybersecurity staffing ratio of at least one human-focused professional for every ten technical ones.

Two CYBERDISE phishing simulation templates: a shared document behind a fake Cloudflare CAPTCHA (ClickFix), and a fund release portal from the fictional Royal Kingdom of Zuvania
phishing4 Phishing Simulation Templates for Human Defense Month 2026

From ClickFix to the Prince of the Royal Kingdom of Zuvania ;-) Four phishing simulation templates for Human Defense Month 2026, ready to import into CYBERDISE. Because phishing doesn’t always have to be boring.

Security awareness professional at his desk next to average salaries of €92K in Europe and $131K in the US and a checklist of awareness duties
awarenessSecurity Awareness Salary: Are Awareness Professionals Underpaid?

In Europe, a security awareness professional earns €92K (about $107K) on average, in North America $131K, according to the 2026 SANS Security Awareness & Culture Report. Set against everything the same report expects of the role, that is less a pay question than a priority question.

An employee shows a colleague from the SOC the suspicious message she just reported on her phone, under the headline From Employee Alert to SOC Action
awarenessWe Finally Have a Flawless Security Culture Action Plan

The SANS 2026 security culture action plan is barely about content. A CEO and board member on why that means rewriting your awareness strategy and bringing the SOC closer to employees.

Three colleagues reviewing an awareness campaign together, with a callout reading approximately three dedicated awareness FTEs
research8 Hard Truths About Security Awareness Team Size (SANS 2026)

I read the new SANS Security Awareness & Culture Report from a slightly unusual perspective: I manufacture security awareness software. What stayed with me was security awareness team size, not tooling — here are my eight takeaways, including a conclusion I fundamentally disagree with.

Phishing hook pulling a corporate login prompt and a human face made of data down into a company's email, endpoints, cloud, databases and HR systems
awarenessCybersecurity Awareness Was Designed for Yesterday’s Attacks

AI lets attackers produce convincing attacks at almost no cost, and people are now the largest and fastest-growing attack category. This essay explains why annual training can't keep pace, and why behaviour changes most when people repeatedly make decisions under realistic conditions.