Boxphish

Business email compromise examples are some of the most useful learning tools a security team has, because they show in plain terms how a few convincing words in an email can lead to enormous financial loss. BEC is now one of the costliest forms of cyber attack facing organisations of every size, and unlike malware it leaves almost no technical trace. By studying real world s...

To build a cyber security awareness training programme, assess your current risk with a baseline phishing simulation, set clear objectives, choose role relevant content aligned to NCSC guidance, run regular simulations, reinforce the lessons over time and measure the results. Treat it as a continuous cycle, not a one off annual course, so behaviour genuinely changes.<...

Security awareness training should cover the threats employees actually face: Phishing and email scams, passwords and multi-factor authentication, social engineering, data protection, ransomware, safe remote and device use, physical security and incident reporting. The strongest programmes refresh these topics regularly and prioritise them by the real risk to your org...

Business Email Compromise vs phishing is a comparison every employee should understand, because the two terms are often used interchangeably when in fact they describe very different threats. Both arrive in your inbox, both rely on deception and both can cause serious harm, but the way they work, the way they are detected and the way staff should respond are not the same. Und...

Building a security awareness training programme from scratch can feel daunting. Where do you start, what should you teach and how do you know whether any of it is actually working? The good news is that an effective programme does not require a huge budget or a dedicated team. What it needs is a clear, structured approach that builds knowledge, changes behaviour and proves i...