Security awareness training resources and blog

RSA 2026: Adopt first. Secure second. Hope the AI sorts it out

CISOs at RSA 2026 wanted to enable employee AI use, and vendors tried to fix that human problem with… more AI. Oh, and Handala tried to…

How Sisense shifted from awareness to action with Fable

Sisense replaced checkbox compliance training with a program employees actually engage with: same-day threat content, 4/5 stars, full audit trail.

Emerging threat: Fake Zoom call compromised axios supply chain

North Korean attackers compromised the axios npm package by tricking a maintainer via fake Zoom call. Here’s the breakdown of this extended social engineering attack.

Everyone talks about human risk. Almost no one measures it.

TL;DR— Part 1 of a multi-part blog series on the data behind Fable’s Human Risk Report Vol. 2. Last week at RSAC, we heard no shortage…

The report: The art (and science) of behavior change in human risk

This is the second volume of Fable Security’s ongoing exploration into how organizations measure, understand, and reduce human risk by both encouraging healthy cyber behaviors and…

Employees see phishing lures, not IOCs.

TL;DR— The final post in this six-part blog series on must-ask questions when creating net-new awareness training. Whenever possible, Fable Security asks its clients, “Do you…

Get the goods

RSA 2026: Adopt first. Secure second. Hope the AI sorts it out