Security awareness training resources and blog

Emerging threat: A real claude.ai link installed a RAT

A real claude.ai link delivered a password-stealing RAT to 29 orgs. Here's how AI-tool searches became malvertising's newest target.

Tell your human risk story at Black Hat 2026

Every good fable has a moral. Let's make yours "our people are our best defense." See you in Las Vegas.

Emerging threat: Abandoned RubyGems maintainer accounts hijacked to poison +574k downloads

SleeperGem hijacked dormant RubyGems accounts to spread malware. Here's why abandoned accounts, domains, and extensions are an everyone problem - not just developers.

The 240-to-1 problem: What the 2026 DBIR revealed about email phishing training

The 2026 Verizon DBIR found mobile phishing sims had a 40% higher click rate than email, with a sample size 240x smaller. Here's why that matters.

What we learned when three security leaders got honest about AI

Jacob Berry, John Yeoh, and Steve Tran sat down for the first Fable Fireside to talk through what the shift from department of no to department…

Awareness was never the goal. Secure behavior is.

Gartner dropped "human risk management." Breach data shows why the old framing never worked, and what "secure behavior management" changes.

Get the goods

Emerging threat: A real claude.ai link installed a RAT