All posts
Topic · 12 articles
Phishing: real lures, awareness training and detection
Phishing tricks people into handing over credentials, money or access through a message or link that looks legitimate. These articles take real phishing examples (fake calendar invites, man-in-the-middle pages, parked-domain lures), then cover the awareness training and detection tooling that reduce the damage.
Put it into practice
Guides and explainers (10)
Google App Password Phishing: Real Alert, Fake Threat
A phishing email that passes Google DKIM and DMARC: the lure hides in an app password name inside a real Google alert. How it works and how to spot it.
October 31, 2026
Security Awareness Training People Actually Finish (2026)
How to design security awareness training employees finish: 3 to 7 minute lessons, decision points, storytelling, role relevance, gamification and the right metrics (report rate, not completion). With an options table: KnowBe4, Proofpoint, Hoxhunt, SANS, Microsoft and PlayCISO.
October 29, 2026
Security Awareness Program for Small Business: 30-Day Plan
A practical 30-day security awareness program for small businesses: owner, five core topics, weekly actions, a fair first phishing test, metrics that matter (report rate), free and paid options, and a printable checklist. Anchored on NIST SP 1300 and CISA Secure Our World.
October 29, 2026
What Is an Attack Vector? Common Types and Defenses
A defensive explainer on attack vectors: what an attack vector is and how it differs from the attack surface, the most common vectors including phishing, stolen credentials, unpatched vulnerabilities, misconfigurations, supply-chain compromise, insiders and physical access, and how layered controls and reducing the attack surface defend against them.
October 23, 2026
What Is a Parked Domain? Meaning and Security Risks
A plain-English explainer on parked domains: what domain parking means, the difference between legitimate and malicious parking, how parked domains enable typosquatting and phishing, and the DNS, monitoring and brand-protection defenses that reduce the risk.
October 23, 2026
What Is a Man-in-the-Middle (MITM) Attack? Prevention
A plain-English explainer on man-in-the-middle attacks: what they are, how they work (ARP spoofing, rogue Wi-Fi, DNS spoofing, SSL stripping, adversary-in-the-middle phishing kits), the main attack classes, and the defenses that actually stop them — TLS and HSTS, certificate validation, VPNs on untrusted networks, phishing-resistant MFA, mutual TLS and DNSSEC.
October 23, 2026
Fake Calendar Invite Phishing: .ics and Teams Lures
Check Point reports phishing that abuses calendar features: malicious .ics files and fake Teams invites steal Microsoft logins. How to spot and block it.
October 19, 2026
Phishing Detection APIs: What They Do and How to Use Them
Phishing detection APIs score URLs, domains and emails for phishing risk in real time. What they check, where they fit in email and app security, and how to evaluate them.
September 26, 2026
URL Reputation APIs: Checking Links for Risk at Scale
URL reputation APIs return a risk signal for a web link — malware, phishing, spam or suspicious hosting. What they check, how they differ from IP reputation, and how to use them safely.
September 26, 2026
AI-Enabled Cyberattacks: How LLMs Are Misused and Stopped
A practical, defender-first look at how attackers misuse large language models — phishing, malware assistance, reconnaissance and social engineering — and the concrete defenses that hold up: phishing-resistant authentication, detection and user reporting.
June 23, 2026