Category: Practical Security

  • The Phishing Test Everyone Failed

    The Phishing Test Everyone Failed

    A simulated phishing email sent to every employee at a mid sized company, the email was a fake package delivery notification, the link went to a fake login page. The click rate was 17 percent. The interesting part is who clicked.

  • Most Security Advice Is Written for Someone Who Is Not You

    Most Security Advice Is Written for Someone Who Is Not You

    Most security advice is written for the median enterprise, the median small business, the median home user, the median developer, and the median is nobody. The advice that is right for the median is wrong for the outliers, which is most of the people actually reading the advice.