Cybercriminals rely on tried and trusted methods for phishing; as long as there is even a four percent chance that phishing techniques will be successful, they will continue to use them.

Against the ongoing backdrop of cyber conflict between nation states and escalating warnings from the Department of Homeland Security, critical infrastructure is becoming a central target for threat actors.

“Evasive phishing" is not a term much heard, but we all will—and need to—start talking a lot more about it than we have in the past.

We should be thinking about how users work, what they do and how it affects the security posture of the business, but does security really start with them?