Social Media and Corporate Guidance

For Cybersecurity Awareness Month's 20th anniversary, NetSPI shares four tactics for defending against social engineering, plus education resources and a Monster Mash video on phishing prevention.

Read about our favorite moments from SecureWorld Boston 2022, featuring conversations on security awareness training, cloud security, cybersecurity crisis management, and more.

A CISO shares tips for reducing business-security friction, including running realistic phishing simulations that fooled 70% of staff and learning from them without eroding employee trust.

A security awareness leader argues for lean, mandatory cybersecurity training, no-shame reporting culture, and lessons on communication and adaptability drawn from cycling from Seattle to Singapore.

Explains why end-to-end encryption in apps like WhatsApp isn't overall security: encrypted channels still deliver phishing links and malware, and endpoint and application risks remain fully in play.

Forgotten files like database dumps and debug logs expand PCI assessment scope, trigger breach notification obligations, and undermine ISO reviews; organizations should locate and clean them up.