Security awareness training resources and blog

Emerging threat: Bitwarden and Checkmarx exploited developer trust to harvest credentials

Trojanized Checkmarx KICS and Bitwarden CLI updates exploited developer trust in "official" releases—no lure required. Here's how to spot the pattern.

Tech can’t stop these threats. Your people can.

Ten Q4 2025 cyber threats outpaced security controls — and why trained employees are the defense layer tech can't replicate. Fable’s latest human threat analysis.

RSA 2026: Adopt first. Secure second. Hope the AI sorts it out

CISOs at RSA 2026 wanted to enable employee AI use, and vendors tried to fix that human problem with… more AI. Oh, and Handala tried to…

How Sisense shifted from awareness to action with Fable

Sisense replaced checkbox compliance training with a program employees actually engage with: same-day threat content, 4/5 stars, full audit trail.

Emerging threat: Fake Zoom call compromised axios supply chain

North Korean attackers compromised the axios npm package by tricking a maintainer via fake Zoom call. Here’s the breakdown of this extended social engineering attack.

Everyone talks about human risk. Almost no one measures it.

TL;DR— Part 1 of a multi-part blog series on the data behind Fable’s Human Risk Report Vol. 2. Last week at RSAC, we heard no shortage…

Get the goods

Emerging threat: Bitwarden and Checkmarx exploited developer trust to harvest credentials