Security awareness training resources and blog

The 240-to-1 problem: What the 2026 DBIR revealed about email phishing training

The 2026 Verizon DBIR found mobile phishing sims had a 40% higher click rate than email, with a sample size 240x smaller. Here's why that matters.

What we learned when three security leaders got honest about AI

Jacob Berry, John Yeoh, and Steve Tran sat down for the first Fable Fireside to talk through what the shift from department of no to department…

Awareness was never the goal. Secure behavior is.

Gartner dropped "human risk management." Breach data shows why the old framing never worked, and what "secure behavior management" changes.

Built for behavior change. Ready for AI risk.

Shadow AI, policy gaps, risky behavior — the same platform Fable customers already use is solving all three.

Emerging threat: Real email thread hijacked by attackers through conversation hijacking

Attackers are hijacking real email threads via compromised vendors to deliver phishing your filters can't catch. The pattern is accelerating in 2026.

AI adoption is a security imperative, not a security problem

Security teams that block AI aren't managing risk; they're creating it. Safe AI adoption is a security team imperative, and what governance that actually enables the…

Get the goods

The 240-to-1 problem: What the 2026 DBIR revealed about email phishing training