Resources

Blog

Phishing Awareness Training: Beyond the Basics

Phishing tactics are changing, and not for the better. At least, not for users. And AI is leading the charge in making vishing, smishing, and even spear phishing attacks more dangerous than ever.But is that all we have to worry about? They are leveraging artificial intelligence to its fullest potential, pushing the boundaries of what we once thought possible. Nowhere is this advancement more...
Blog

Why Security Awareness Programs Fail—and How to Fix It

Cybersecurity threats target systems, processes, and, increasingly, people. While technological defenses like firewalls and endpoint detection continue to advance, the human element remains a frequent entry point for attackers.According to Verizon’s most recent Data Breach Investigation Report, 68% of data breaches involve human factors—whether through error, negligence, or malicious actions.This...
On-Demand Webinar

Fortra’s Terranova Security Q4 Product Roadmap Webinar

Catch up on the insights shared by our product leaders in this engaging webinar. Watch the recording below to explore how these updates can strengthen your security training program.What’s covered:The latest product enhancementsAI-focused Content Bundle updatesNew license management featuresA preview of features arriving in 2025Get practical updates to support your...
Blog

How Response-Based Scams Evade Detection and What You Can Do to Prevent It

Phishing has become the most common cyber threat, leading companies to update their defenses with tools like detection systems and targeted employee training.Unfortunately, cybercriminals are also adapting, finding new ways to bypass these protections. This constant back-and-forth highlights the need for companies to stay alert and responsive.One concerning tactic on the rise is response-based...
Blog

Overcoming Challenges in Remedial Training for Cybersecurity Awareness

Remedial training is a type of training specifically focused on individual employees who struggle to understand and abide by specific cybersecurity concepts. While this type of training can be very beneficial, it has a few pitfalls that must be dealt with to get results.This article will explain the most common challenges of remedial training programs and provide helpful tips to overcome them....
On-Demand Webinar

The $25M Supply Chain Hack: Security Breach Podcast

Supply chain attacks are on the rise, with nearly 20% of organizations reporting breaches linked to vulnerabilities within their supply chains, according to IBM’s Cost of a Data Breach Report. These attacks come with a hefty price tag, averaging nearly $4.5 million per incident, and they often take longer to detect and resolve than other types of breaches.Join us in an insightful discussion with...
Blog

Practical Approaches to Effective Remedial Training for Cybersecurity Awareness

Every employee needs a basic understanding of cybersecurity and how to spot cybercriminal attacks because cybercriminals can directly target their email inboxes with seemingly harmless messages that can compromise your organization’s entire network. This can be a difficult task, as the threat landscape is constantly changing, so even knowledgeable employees can fall behind and need more training....
Guide

The Future of Security Awareness

In this interview, Theo Zafirakos, CISO at Fortra’s Terranova Security, discusses the state of cybersecurity awareness training and the sophisticated threats enterprises now face.
Blog

130 Cyber Security Statistics: 2024 Trends and Data

Cybersecurity awareness is an everyday job, and it’s easy to fall into a false sense of security once you have a solid plan in place. Every year, statistics are a reminder that hackers and scammers never sleep. New trends and attack types pop up daily, making it difficult to keep track.This list is a rundown of the most important statistics of the year, providing a good overview of threats to keep...
Blog

Securing Your Organization’s Reputation from Brand Impersonation Attacks

Phishing attacks are becoming increasingly sophisticated. Over 51% of the time, email attackers pretend to be one of the top 20 global brands, with Microsoft being the most common impersonation.Picture this: one of your users receives an email that appears to be from a trusted partner or a commonly used service. The branding is accurate, the language is convincing, and the email seems legitimate....
Blog

Strategizing Cybersecurity Awareness with Different Training Types

Many organizations face regulatory requirements to train employees on cybersecurity threats, but simply meeting these standards doesn't mean you’re protecting your people and your data. Effective training goes beyond compliance, offering frequent exposure to new ideas, regular repetition, practical application, and continuous assessment. This is where targeted training types come into play...
Blog

The Rise of Quishing: How QR Code Phishing is Rising and What You Can Do About It

QR codes are usually used in public settings, notably on flyers and restaurant menus, but they also appear in online communications such as emails. These black-and-white square patterns have seen a meteoric rise recently, going from a niche industrial tool to a widespread replacement for links in physical mediums. As with any new technological medium to share information, hackers have been paying...
Blog

How to Successfully Manage Repeat Clickers

Managing repeat clickers is critical to maintaining robust organizational security, as these individuals significantly increase the risk of successful phishing attacks.According to a recent analysis of 6,000 employees receiving simulated phishing emails, about 6% of users were responsible for approximately 29% of the failures.Recognizing this could help maximize the return on investment (ROI) of...