Our Blog

Insights for BuildingCyber-Resilient Workforces

Explore the latest thinking on Human Risk Management, cybersecurity resilience, compliance, and workforce resilience.

The Meeting Invite That Wasn't: Inside a State-Backed Phishing Campaign
Phishing Simulations

The Meeting Invite That Wasn't: Inside a State-Backed Phishing Campaign

Calendar invite phishing uses a real Microsoft login page to take over accounts. See how Storm-2372's device code campaign works and why the Gulf is a target.

Oct 14•5 Min read

Read More
The Cost of a Convincing Video Call: BEC in 2026
Social Engineering Tactics

The Cost of a Convincing Video Call: BEC in 2026

Business email compromise now arrives by video call too. See how the $25M Arup deepfake and the FBI's 2025 figures changed BEC, and what to ask before a wire.

Oct 12•5 Min read

Read More
Why QR Codes Are Now a Board-Level Blind Spot
Phishing Simulations

Why QR Codes Are Now a Board-Level Blind Spot

Quishing hides phishing links in QR codes to slip past email filters and MFA. See how the FBI's Kimsuky warning changed the threat, and what to ask your team.

Oct 8•4 Min read

Read More
What Is Smishing? A Guide for Security Teams
Phishing Simulations

What Is Smishing? A Guide for Security Teams

Smishing is phishing delivered by SMS. Learn how attackers impersonate banks and couriers, real examples from the US and UAE, and how security teams defend against it.

Sep 24•6 Min read

Read More
How Distributed Workforces Should Approach Human Risk Management
Human Risk Management

How Distributed Workforces Should Approach Human Risk Management

Distributed teams face different languages, threat patterns, and cultural behaviors. Learn how organizations can approach Human Risk Management with localization, continuous measurement, and region-specific cyber resilience.

Jul 16•6 Min read

Read More
How to Train Employees to Recognise Social Engineering Before a Breach
Social Engineering Tactics

How to Train Employees to Recognise Social Engineering Before a Breach

Employees need more than awareness to stop social engineering attacks. Here is how organizations can train staff to recognize manipulation tactics before they lead to credential theft, fraud, or data loss.

Jul 9•7 Min read

Read More
Why Awareness Training Alone Isn't Reducing Human Error
Cybersecurity Awareness

Why Awareness Training Alone Isn't Reducing Human Error

Annual awareness training alone is not reducing human error. Organizations need simulations, behavioral data, and adaptive interventions to measurably lower workforce cyber risk.

Jul 9•6 Min read

Read More
Features a Cyber Risk Platform Needs for an APAC Bank
Human Risk Management

Features a Cyber Risk Platform Needs for an APAC Bank

APAC banks face rising phishing, fraud, compliance, and cross-border cyber risk. Here are the key features a cyber risk management platform should have to help financial institutions measure and reduce human cyber risk at scale.

Jul 9•7 Min read

Read More
How to Stop Employees Falling for Vishing and Smishing Scams
Phishing Simulations

How to Stop Employees Falling for Vishing and Smishing Scams

Vishing and smishing bypass email filters, secure gateways, and other technical controls by targeting employees directly through calls and text messages. Here is how organizations can reduce that risk with simulations, adaptive training, and behavioral intelligence.

Jun 29•7 Min read

Read More
Why Middle East BFSI Firms Are Moving from Awareness Training to Human Risk Management
Human Risk Management

Why Middle East BFSI Firms Are Moving from Awareness Training to Human Risk Management

Discover why BFSI institutions across the UAE and KSA are moving beyond cybersecurity awareness training toward human risk management, and what measurable workforce risk reduction actually looks like.

Jun 29•8 Min read

Read More
Social Engineering Tactics Targeting Enterprises in 2026, and How to Stop Them
Social Engineering Tactics

Social Engineering Tactics Targeting Enterprises in 2026, and How to Stop Them

Social engineering tactics are the #1 cause of enterprise breaches. Discover the types of social engineering attackers use in 2026 and how to reduce human risk.

Jun 18•6 Min read

Read More
Security Awareness Training for SAMA Compliance: A Guide for Saudi Enterprises
Cybersecurity Awareness

Security Awareness Training for SAMA Compliance: A Guide for Saudi Enterprises

Learn how Saudi enterprises can build a SAMA-compliant workforce with an AI-driven Human Risk Management Platform for cybersecurity awareness training, phishing simulations, and audit ready reporting.

Jun 16•9 Min read

Read More