
The Meeting Invite That Wasn't: Inside a State-Backed Phishing Campaign
Calendar invite phishing uses a real Microsoft login page to take over accounts. See how Storm-2372's device code campaign works and why the Gulf is a target.
Oct 14•5 Min read
Our Blog
Explore the latest thinking on Human Risk Management, cybersecurity resilience, compliance, and workforce resilience.

Calendar invite phishing uses a real Microsoft login page to take over accounts. See how Storm-2372's device code campaign works and why the Gulf is a target.
Oct 14•5 Min read

Business email compromise now arrives by video call too. See how the $25M Arup deepfake and the FBI's 2025 figures changed BEC, and what to ask before a wire.
Oct 12•5 Min read

Quishing hides phishing links in QR codes to slip past email filters and MFA. See how the FBI's Kimsuky warning changed the threat, and what to ask your team.
Oct 8•4 Min read

Smishing is phishing delivered by SMS. Learn how attackers impersonate banks and couriers, real examples from the US and UAE, and how security teams defend against it.
Sep 24•6 Min read

Distributed teams face different languages, threat patterns, and cultural behaviors. Learn how organizations can approach Human Risk Management with localization, continuous measurement, and region-specific cyber resilience.
Jul 16•6 Min read

Employees need more than awareness to stop social engineering attacks. Here is how organizations can train staff to recognize manipulation tactics before they lead to credential theft, fraud, or data loss.
Jul 9•7 Min read

Annual awareness training alone is not reducing human error. Organizations need simulations, behavioral data, and adaptive interventions to measurably lower workforce cyber risk.
Jul 9•6 Min read

APAC banks face rising phishing, fraud, compliance, and cross-border cyber risk. Here are the key features a cyber risk management platform should have to help financial institutions measure and reduce human cyber risk at scale.
Jul 9•7 Min read

Vishing and smishing bypass email filters, secure gateways, and other technical controls by targeting employees directly through calls and text messages. Here is how organizations can reduce that risk with simulations, adaptive training, and behavioral intelligence.
Jun 29•7 Min read

Discover why BFSI institutions across the UAE and KSA are moving beyond cybersecurity awareness training toward human risk management, and what measurable workforce risk reduction actually looks like.
Jun 29•8 Min read

Social engineering tactics are the #1 cause of enterprise breaches. Discover the types of social engineering attackers use in 2026 and how to reduce human risk.
Jun 18•6 Min read

Learn how Saudi enterprises can build a SAMA-compliant workforce with an AI-driven Human Risk Management Platform for cybersecurity awareness training, phishing simulations, and audit ready reporting.
Jun 16•9 Min read