Cybersecurity Education

Read articles about security awareness, risk management, behavior change, and more

Categories:

Resource Hub

Research

Stories

News

Education

Featured Article

What is Quishing? Ultimate QR Code Phishing Prevention Guide

How quishing is being used in attacks, what these threats look like in the wild and best practices for avoiding them.

Read the article

Topics:

Creating a Company Culture for Security: What Actually Works (According to 3M+ Hoxhunt Users)

Your essential guide to building a robust security culture. How to implement effective training, policies, and recognition systems to mitigate human cyber risk.

10 Essential Security Awareness Training Topics (And How We Make Them Stick)

The essential security awareness topics that truly change employee behavior and how Hoxhunt blends behavioral science, real-world simulations, and adaptive learning to boost engagement.

How to Achieve 90%+ Reporting and Completion Rates (Without Forcing Anyone)

With Hoxhunt, on average more than 60% of employees are engaged in the training after just one year. ‍But some organizations manage to push past 85%, even into the 90s. What's their secret?

How Can Generative AI Be Used in Cybersecurity Training?

How generative AI is revolutionizing cybersecurity training with adaptive phishing simulations, personalized learning experiences, and real-time threat response.

5 Best Cybersecurity Solutions for Training Employees (2025)

Shopping around for the best cybersecurity training solutions but not sure where to start? Here's what 6,000+ real customer reviews are saying.

Business Email Compromise Statistics 2025 (+Prevention Guide)

A deep dive into the essential business email compromise statistics that security teams need to know.

AI and the Future of Phishing Training: Insights From Hoxhunt's CEO

Co-founder and CEO, Mika Aalto provides insights in this Q&A on how, for better and for worse, AI is shaping the future of phishing training

6 Proofpoint Competitors & Alternatives for Effective Training

A deep dive into the top Proofpoint competitors and alternatives for effective security awareness training to find the best fit for your organization.

Hoxhunt Reviews: What Customers Are Saying (Nov 2024)

Here's what real Hoxhunt customers say about the platform. A deep dive into simulations, reporting, quality of support and more.

Top 5 KnowBe4 Alternatives You Should Know About (Jan 2025)

The top KnowBe4 competitors to consider for security awareness and phishing training. Compare features, personalization, analytics, and more to make the right choice for your organization.

19 Security Frameworks Requiring SAT (Dec 2024)

A complete overview of major standards and regulations that require awareness training. Identify the most common standards, regulations, and security frameworks that require SAT.

Cyber Horror Stories: Experts Share 3 Chilling Security Disasters

Every year around Halloween, security professionals gather around the campfire to tell spooky tales. This year, Barak Engel and Petri Kuivala join Hoxhunt to share some of their cyber horror stories.

NIS 2 Checklist CxO and Board of Directors

This NIS 2 Checklist gives the compliance basics for the CxO and Board of Directors to satisfy this European cybersecurity regulation.

Top 10 costs of phishing

The top 10 costs of phishing are direct, indirect, and far reaching.

Why building a strong security culture is vital for reducing human risk – Hoxhunt

Noora Ahmed-Moshe's presentation to an exclusive group of CIOs at Kocho View in London explains why building a security culture is vital to reducing human risk.

Infographic: Make-or-Break Phishing Metrics

How to measure and drive behavior change that shields your organization from cyber-attacks.

Biggest hidden risk in cybersec: missed phishing simulations

In the world of cybersecurity, the unknown represents your biggest risk. A miss today is a phish tomorrow.

Cybersecurity awareness training and cyber insurance

Cybersecurity awareness training has become crucial to getting cyber insurance and lowering premiums in 2021. That trend will continue to grow.

How Behavior-Based Cyber Security Training Works

Learn how behavior-based cyber security training drives lasting employee behavior change. A breakdown of the key components, benefits, and why it’s essential for building a strong security culture.

Hoxhunt vs Competitors: Head-to-Head Comparison (Based on 6,000+ Reviews)

Discover how Hoxhunt outperforms competitors in cybersecurity training. Based on real reviews, compare Hoxhunt's features, quality, and effectiveness to leading alternatives.

What is a Human Firewall? Examples, Strategies + Training Tips

Empower your team to be a human firewall. Discover how training, vigilance, and smart habits protect against cyber threats.

How Yu-kai Chou's Gamification Framework Revolutionized Security Awareness Training

Here's how integrating Yu-kai Chou's Octalysis Gamification and Behavioral Design Framework into cybersecurity training can dramatically improve user engagement and resilience.

Attack Simulation Training: Hoxhunt vs Microsoft Defender

Wondering which attack simulation training is best for your team? Get a full breakdown of Hoxhunt vs. Microsoft Defender to make an informed decision.

How to Influence Security Behaviors: Insights from "The Human Element" Webinar Series

Maxime Cartier recaps the webinar series, "The Human Element: The Science Behind Influencing Security Behaviors" and key learnings of the intricacies of human behavior in reducing cybersecurity risk.

Open Redirects - Weaponizing Trust Built by Legitimate Companies

Open Redirects help attackers spoof legitimate brand URLs in their phishing attacks.

How hackers bypass multi-factor authentication

Knowing how hackers bypass multi-factor authentication helps users stay safe and make the right choices.

Deliveroo feedback survey phishing email

We picked up a Deliveroo feedback survey phishing email that is fairly clever. Here's how to spot it and stay off the hook.

Funds transfer phishing attacks work better with a crisis

The funds transfer phishing attack is old, and simple ones often get caught in email filters; but they can still be dangerous, especially today.

4 ways how hackers bypass email filters

Learn to recognize phishing emails and stay off the hook by knowing the top 4 ways how hackers bypass email filters.

Porn scams, Ooh la la

Let’s talk about porn scams, also known as sextortion attacks. First, they are always a hoax. Second, here's how to stay off the hook.

Report: SaaS permissions leave huge amounts of data exposed

Your SaaS suite is leaving your backdoor open. Here's how to fix it.

Log4J Log4Shell vulnerability explained

Log4J Log4Shell vulnerability explained to help you understand what it is and how to stay protected

Default Guest settings Azure AD

A security vulnerability was recently reported in the default guest permissions of Microsoft Azure Active Directory. Here’s how to fix it and stay safe from attackers.

External email warning banner phish

This phishing email was sent from outside the organization but is replacing the Caution! External Sender banner with a safe sender banner.

Update regarding the Apple iOS Mail App Vulnerability

Apple just recently confirmed the most significant vulnerability in iOS history after ZecOps made a public announcement about their discovery of a security flaw.

iOS Mail App Security Flaw

According to security researchers, the iOS mail app, which is the email client that can be found on most Apple iPhones and iPads, has a severe security flaw making it vulnerable to attacks.

Social Engineering Training Explained (Essential Guide)

Your ultimate guide to the process behind social engineering training and all of the tips and know-how you need to ensure your training successfully changes behavior.

Advertisers Beware—How Scammers Are Getting Into Your Ad Accounts

From Spear-Phishing, to Credential Harvesting, To Possible Ad Fraud. Keep Reading To Find Out How This Story Unfolded and How You Can Avoid Getting Caught.

Social engineers are targeting social media accounts

We're seeing an uptick in social engineers targeting social media accounts

The good, the bad, and the ugly about browser fingerprinting

Now that cookies are on their way out, a much sneakier way of identifying you is on its way in.

This '90s internet throwback is the latest hacking trend

Years later, pop-ups are back, this time serving a different purpose... stealing your info.

How to prevent crypto wallet phishing

The more digital money you make, the more digital problems you get. Here's some tips to keep your crypto wallet safe.