Resources and Insights

In our latest blog post, we explore how different departments within an organization face unique cybersecurity threats, each requiring a tailored defense strategy. From sales teams dealing with phishing emails disguised as client communications to developers targeted with malicious code embedded in code repositories, recognizing these distinct attack profiles is crucial. By implementing role-based training and microlearning, organizations can empower every employee to become a vigilant defender against threats specific to their roles. Discover how PhishFirewall's customized approach transforms departmental vulnerabilities into collective strengths, fostering a security-aware culture across the entire organization.

In our latest blog post, we reveal how even top cybersecurity executives aren't immune to sophisticated cyber attacks! 😱 **Chris Nicolaou, the Chief Information Security Officer (CISO) of CloudSpace**, shared his shocking experience of nearly falling victim to a cunning phishing attempt. This eye-opening incident highlights the hidden dangers lurking within organizations and how hackers exploit human vulnerability—even among the experts. But there's good news! You can transform your biggest vulnerability—your employees—into your greatest strength. Discover how microtraining, role-based education, and positive reinforcement can empower your team to outsmart cybercriminals at every turn. Learn about the game-changing strategies and tools (like PhishFirewall's AI Cyber Coach) that can keep your business one step ahead of evolving threats. 🚀 Don't miss out on these insider insights that could save your company from disaster! Read the full story now and take the first step toward fortifying your organization's cybersecurity posture.

In a recent episode of the "Phishing for Answers" podcast, PhishFirewall's CEO, Joshua Crumbaugh, had a conversation with cybersecurity expert Ray Espinoza about the crucial role of human behavior in cybersecurity. They discussed how understanding and leveraging behavioral science can transform employees from potential risks into valuable assets in the fight against cyber threats. By focusing on relationship-building, role-based training, gamification, and continuous microtraining, organizations can reduce human error and build a positive security culture. PhishFirewall's innovative approach aligns perfectly with these strategies, offering AI-driven, gamified training solutions that make security awareness engaging and effective.

In a recent episode of the "Phishing for Answers" podcast, PhishFirewall's CEO, Joshua Crumbaugh, sat down with cybersecurity expert Pieter VanIperen of Own Company to discuss how understanding human behavior is key to reducing human error in cybersecurity. They explored how leveraging behavioral science, role-based training, and positive reinforcement can transform employees from potential risks into strong defenders against cyber threats. By focusing on gamification, AI-driven insights, and just-in-time training, they highlighted how organizations can build a human-centric cybersecurity culture that reduces errors and enhances overall security. PhishFirewall's innovative approach makes cybersecurity training engaging and effective, turning human error into an organization's greatest defense.

In a recent episode of the "Phishing for Answers" podcast, PhishFirewall's CEO, Joshua Crumbaugh, and cybersecurity expert Norman Kromberg discuss how human-centric approaches can significantly reduce human error in cybersecurity. They explore the power of role-based training, the effectiveness of micro-training through short videos, and the importance of positive reinforcement. By focusing on engaging and tailored training methods, organizations can transform their employees from potential risks into their strongest defense against cyber threats. PhishFirewall leads the way with innovative micro-training solutions that make cybersecurity both accessible and enjoyable for everyone.

🚀 New Blog Post: I had an insightful conversation with Jess Vachon, CISO of PRA Group, about revolutionizing cybersecurity through role-based training and automation. Discover how micro-learning and AI awareness are critical in today’s threat landscape, and how solutions like PhishFirewall can shield your business from sophisticated cyber attacks. 👉 Watch the full episode to learn how to fortify your defenses and empower your team!

Wendy Nather, a cybersecurity leader, joins PhishFirewall CEO Joshua Crumbaugh to tackle some of the biggest gaps in security awareness. They examine why traditional training often fails, the transformative impact of role-based and AI-driven training, and why users should be viewed as assets rather than weak links. Wendy shares insights from research showing that organizations with targeted, role-specific training see far better outcomes. They also discuss the importance of creating an open environment where employees feel empowered to report security concerns.

In this episode of Phishing for Answers, Dr. Joshua Scarpino, CISO of TrustEngine, discusses the future of security awareness training. He highlights the importance of personalized, bite-sized training sessions and adapting to AI-driven cyber threats. Dr. Scarpino emphasizes the need for ongoing, relevant training that ties both to employees’ roles and personal lives to create a lasting culture of security. Learn how TrustEngine’s approach mirrors the key strategies that PhishFirewall brings to the table, ensuring your team is always one step ahead of evolving threats.

In a world full of phishing scams and fake requests, “I Swear I’m Your CFO” brings some much-needed humor to an all-too-common scam: the fake boss asking for gift cards. This hilarious and catchy tune teaches listeners a critical cybersecurity lesson—if your CFO is asking for gift cards, it’s definitely NOT your CFO!

In this episode of Phishing for Answers, Joshua Crumbaugh interviews Marcos Marrero, CISO of H.I.G. Capital, to discuss the unique security challenges in private equity and how his team has developed a culture of vigilance. Marrero shares a story about a sophisticated fake data room scam targeting their firm, emphasizing the importance of continuous security awareness and employee empowerment. Key takeaways include turning employees into “human firewalls,” fostering a “see something, say something” culture, and simplifying security communication for non-technical stakeholders. PhishFirewall’s AI cyber coach aligns with these principles by providing continuous, role-based training and phishing simulations to strengthen security both in the workplace and in employees’ personal lives.

In this episode, James Phillips, Principal Consultant at SAPCG, delves into the importance of role-based training and how AI automation is transforming cybersecurity awareness. He discusses the growing sophistication of phishing attacks and how PhishFirewall’s zero-campaign management and AI-driven cyber coach provide a customized and friendly training experience. With micro-training sessions that are less than a minute long, PhishFirewall is the TikTok of cybersecurity awareness, ensuring that employees stay engaged and protected with minimal disruption to their workflow.

In this episode, Christopher Russell, CISO of tZERO Group, explains how attackers are shifting from mass phishing attempts to highly targeted, personalized attacks that mimic normal business communications. Russell emphasizes the importance of role-based training, fostering a supportive security culture, and using phishing simulations to build trust within organizations. Discover how to protect your teams from this new wave of phishing threats and keep your business secure.

Join us as Steve Cobb, CISO of Security Scorecard, shares insights on the human side of cybersecurity, building a strong security culture, and tackling insider threats. Don’t miss his expert take on fostering engagement and resilience in today’s evolving threat landscape. #Cybersecurity #InsiderThreats #SecurityCulture #PhishFirewall

Tim Dzierzek, CISO of Aya Healthcare, shares why employees are the real assets in your defense, how empathy drives better phishing simulations, and why AI-powered, role-specific training is the future of security awareness. Listen to this episode of Phishing for Answers for practical insights on building a human-centered security culture.

In this episode of Phishing for Answers, Mike Crandall shares his journey from military service to leading cybersecurity initiatives for small to mid-sized businesses. Mike reveals some of the most interesting phishing tests he’s run, including one where a city employee clicked a link three times a day for a week, trying to claim a gift card! With a background in building secure networks for the Department of Defense, Mike discusses the challenges of building a security culture in organizations, the role of phishing simulations, and the importance of role-based training. He emphasizes the need to change the way we treat users, turning them from the “weak link” into the first line of defense. Whether you’re looking to improve your security awareness programs or better understand how to engage employees in cybersecurity, this episode is packed with practical advice and real-world stories.

In this episode of "Phishing for Answers," Kip James, a cybersecurity expert at the Bureau of Reclamation, shares his journey from the early days of technology as a hobbyist to becoming a seasoned CISO. With over four decades of experience, Kip provides valuable insights on building a culture of security, the human element in cybersecurity, the evolving role of AI, and effective strategies for phishing awareness and employee training.

This blog post recaps the conversation between Bob Fabien and Joshua Crumbaugh, focusing on the importance of human-centric training in cybersecurity. They discuss how behavioral science, micro-training, and simulations can effectively reduce phishing attacks and strengthen organizational defenses.

CMMC Level 2 compliance demands more than generic cybersecurity training—it requires role-specific training to tackle unique risks across your organization. Each department, from Helpdesk to Developers, faces distinct threats based on the data they handle. In this blog, we break down why role-based training is critical for CMMC compliance, focusing on key roles like SOC Analysts, Network Engineers, and HR personnel. We offer practical tips to ensure these roles are prepared to safeguard CUI and meet stringent security standards.

This blog post explores the concept of learned helplessness in phishing susceptibility, using the story of Mike, a diligent accountant, to illustrate how repetitive, unfair phishing training without feedback can lead even cautious employees to feel powerless and give up. The post argues that “gotcha” phishing simulations set employees up to fail, fostering disengagement rather than improving security awareness. The solution? Just-in-time training and gamification, which provide real-time, constructive feedback and make training both fair and engaging. This shift from punitive tactics to educational, empowering methods breaks the cycle of learned helplessness and strengthens employees’ phishing defenses. The post concludes with a call to action to adopt PhishFirewall’s innovative, automated approach to phishing training.

Discover how Darcula, a new phishing-as-a-service platform, is revolutionizing cybercrime with easy-to-use phishing kits and sophisticated tactics. Learn why businesses must enhance their security measures to combat this emerging threat and protect their sensitive data.

AI is revolutionizing cybersecurity, but it’s also empowering cybercriminals. This post explores how AI advancements by Apple and Microsoft highlight the urgent need for AI-driven defenses. Discover how PhishFirewall’s AI training prepares your team to stop sophisticated phishing attacks and stay ahead of AI-driven threats. Don’t wait—integrate AI into your cybersecurity strategy today!

🚨 URGENT ALERT 🚨 PhishFirewall has uncovered a massive surge in AI-powered Adobe Sign phishing attacks targeting state and local government agencies and law enforcement! 😱 These sneaky attackers are using advanced techniques like consent phishing to bypass MFA and gain access to sensitive data. 🕵️‍♂️ Don't let your organization fall victim to these convincing scams! 🛡️ Read our latest blog post to learn how PhishFirewall's can help you stay one step ahead of the bad guys. 💪 #PhishFirewall #AdobeSignPhishing #ConsentPhishing

🚨 New phishing threat alert! 🚨 Fake email chain attacks are costing companies millions, using perfectly spoofed emails that look like real conversations between executives and trusted partners. 😨 These attacks often rely on successful BEC attacks to lend credibility to their schemes, putting your organization at risk. 🕵️‍♂️ Learn more about this evolving threat and how to protect your business in our latest blog post, "The Dangerous Evolution of Phishing: How Fake Email Chains Are Tricking Employees and Stealing Millions." 📚 Don't wait until it's too late – read now and stay informed! 💡 #phishing #cybersecurity #securityawareness

🚨 Deep fakes are the new frontier of cybercrime, and your business could be next. 🚨 In our latest blog post, we reveal the shocking tactics scammers are using to impersonate CEOs and steal millions. 💰 Plus, we share expert strategies for spotting these sophisticated scams before they strike. 🕵️‍♂️ Don't wait – read "Deep Fakes: The New Frontier of Cybercrime and How to Spot Them" now and arm your employees with the knowledge they need to protect your organization. 🛡️ #deepfakes #cybersecurity #cybercrime

The recent Okta breach is a stark reminder that the battleground for cybersecurity is not just in the servers, but in the synapses of every employee's brain. 'You can't patch stupid' is a defeatist adage that our industry clings to, yet this breach shows the fallacy of such thinking. Our latest post delves into why a mindset shift is imperative, from outsmarting hackers to outsmarting our own behavioral pitfalls. We argue that the only real fix to the phishing scourge is a revolutionary change in organizational culture, powered by behavioral science. Join us as we explore how ethical hacking and culture change are the duo that can reclaim cybersecurity's future.

New York's financial sector is now governed by the Second Amendment to 23 NYCRR 500, a set of cybersecurity regulations. While the amendment introduces robust technical and procedural requirements, it notably overlooks the human element of cybersecurity. Behavioral science principles, such as cognitive load theory and spaced learning, emphasize the need for digestible, continuous training. Over 90% of breaches start with human error, yet regulations like this one sideline the human element. For cybersecurity measures to be truly effective, continuous security awareness training must be prioritized, ensuring that every individual is empowered with the knowledge and skills to combat cyber threats.

Consent phishing is a sneaky tactic where hackers pretend to be trustworthy apps or services to trick people into giving them permissions. Once they have these permissions, they can get into real cloud services and steal sensitive data. This post will explain what consent phishing is, how it works, and how to protect against it, with a focus on the innovative solutions provided by PhishFirewall.

Unpacking the NIST Cybersecurity Framework 2.0 Public Draft is like unboxing a new gadget—it’s the same but better. The proposed changes in the training requirements are subtle but pinpointed for clarity, trimming any room for misinterpretation. While most vendors miss the mark on role-based training, the new draft illuminates these gaps. Dive in to understand how these changes might be more significant than you think.