Request a demo

Cybersecurity Education

Read articles about security awareness, risk management, behavior change, and more

Featured Article

What is Quishing? Ultimate QR Code Phishing Prevention Guide

How quishing is being used in attacks, what these threats look like in the wild and best practices for avoiding them.

Read the article
Topics
Topics:
All
Security Awareness
Risk Management
Behavior Change
Threats
Vulnerabilities

Repeat Offenders in Phishing: Here's How We Train Them Out

Repeat phishing offenders aren’t the problem... static training is. Learn how we use adaptive simulations to convert clickers into security assets.

10 Email Security Best Practices That Actually Change Behavior

This playbook will guide you through the essential email security best practices you need to know to educate employees, mitigate risks, and protect your organization.

Is Your Social Engineering Training Actually Working?

Your ultimate guide to the process behind social engineering training and all of the tips and know-how you need to ensure your training successfully changes behavior.

Does Gamified Cyber Security Training Actually Work?

Gamified cyber security training is a scientifically proven method to boost user engagement and motivate them to change behavior and build cyber skills continuously.

Vishing Attacks Surge 442%: Here's How We're Simulating Them

Vishing attacks are spiking, and they’re powered by AI voice clones and social engineering. Here's how to prevent vishing with real-world tactics and simulation-based training.

Hoxhunt vs KnowBe4: Why Teams Are Ditching Manual Tools

Compare Hoxhunt vs. KnowBe4 with real user insights, reviews, and security team feedback. Find out how each platform drives real behavior change, reduces admin overhead, and builds a stronger security

Positive, Not Punitive Cybersecurity Awareness Training

Positive phishing awareness training lowers data breach risk and builds cybersecurity culture; CISOs are moving on from traditional punitive models.

Manufacturing Cyber Security​: Top 4 Training Solutions 2025

In-deph guide on the pros and cons of the top cybersecurity training solutions for manufacturing. Based on real customer reviews.

DORA Regulation: Summary, Compliance Checklist + Training

Ultimate guide to DORA regulation in 2025, including compliance requirements, who it impacts, key pillars, and actionable strategies for financial firms.

How to Improve Engagement in Security Awareness Training

Actionable strategies to improve engagement in security awareness training, foster employee participation, and reduce cybersecurity risks.

AI and the Future of Phishing Training: Insights From Hoxhunt's CEO

Co-founder and CEO, Mika Aalto provides insights in this Q&A on how, for better and for worse, AI is shaping the future of phishing training

6 Proofpoint Competitors & Alternatives for Effective Training

A deep dive into the top Proofpoint competitors and alternatives for effective security awareness training to find the best fit for your organization.

Cyber Insurance and Security Awareness Training

Why cyber insurance needs human risk management platforms and so do you

How to Prevent Phishing: Ultimate Playbook for CISOs

Your ultimate guide on how to prevent phishing. Everything you need to know to implement best practices and set up training that measurably reduces risk.

Spam vs Phishing: What You Need to Know to Protect Your Employees

Your ultimate guide to spam vs phishing. What the differences are, how to recognize them and all of the practical measures you can take to keep your organization safe.

What is an SOC Report? And Does your Organization Need One?

What is an SOC report? What are the different types of SOC reports available? How do you obtain one? Your questions answered.

How to Reduce Human Risk: Best Practices for Security Teams

We'll look into the behaviors to watch out for, how to assess risk and all the strategies you need to tangibly reduce human risk across your organization.

The difference between a security awareness manager and a human risk manager

The Human Risk Manager controls the process of identifying, evaluating, and mitigating the cybersecurity risks associated with people. 

Repeat Offenders in Phishing: Here's How We Train Them Out

Repeat phishing offenders aren’t the problem... static training is. Learn how we use adaptive simulations to convert clickers into security assets.

Changing the Security Narrative: From IT Blockers to Trusted Partners

Here's how to change the narrative around cybersecurity to get employees engaged.

What Actually Drives Cybersecurity Behavior Change? According to Real Hoxhunt Data

How do you achieve cybersecurity behavior change? A breakdown of how science-based training transforms awareness into real-world risk reduction.

How Behavior-Based Cyber Security Training Works

Learn how behavior-based cyber security training drives lasting employee behavior change. A breakdown of the key components, benefits, and why it’s essential for building a strong security culture.

Hoxhunt vs Competitors: Head-to-Head Comparison (Based on 6,000+ Reviews)

Discover how Hoxhunt outperforms competitors in cybersecurity training. Based on real reviews, compare Hoxhunt's features, quality, and effectiveness to leading alternatives.

What is a Human Firewall? Examples, Strategies + Training Tips

Empower your team to be a human firewall. Discover how training, vigilance, and smart habits protect against cyber threats.

Attachments in Phishing 101

Attackers use attachments in phishing emails to steal your information or spread malware on your system. Learn the basicics of attachments in phishing.

Just how much of a threat is Business Email Compromise?

A guide to Business Email Compromise (BEC): how it works and how you can prevent your company from being a victim of the scourge of BEC

Phishing 101: How Phishing Attacks and Scam Emails Work

Phishing is a cybercrime where attackers want to lure information from you. Learn about the most common phishing schemes and attacks and how to detect it.

How to Recognize and Avoid Phishing Attacks

Learn how to recognize even the most advanced phishing attacks, and avoid exposing your own or your company's sensitive information.

How OSINT is Used Against Your Employees

Let's learn about OSINT gathering and discover how information can be exploited by the 'bad guys' to gain access to the corporate information system.

What is Spear-Phishing and How Do You Recognize It?

Learn what spear-phishing is, how it works, and how it's different from regular phishing. Read how you can recognize spear-phishing attacks?

Report: SaaS permissions leave huge amounts of data exposed

Your SaaS suite is leaving your backdoor open. Here's how to fix it.

Log4J Log4Shell vulnerability explained

Log4J Log4Shell vulnerability explained to help you understand what it is and how to stay protected

Default Guest settings Azure AD

A security vulnerability was recently reported in the default guest permissions of Microsoft Azure Active Directory. Here’s how to fix it and stay safe from attackers.

External email warning banner phish

This phishing email was sent from outside the organization but is replacing the Caution! External Sender banner with a safe sender banner.

Update regarding the Apple iOS Mail App Vulnerability

Apple just recently confirmed the most significant vulnerability in iOS history after ZecOps made a public announcement about their discovery of a security flaw.

iOS Mail App Security Flaw

According to security researchers, the iOS mail app, which is the email client that can be found on most Apple iPhones and iPads, has a severe security flaw making it vulnerable to attacks.

How to prevent crypto wallet phishing

The more digital money you make, the more digital problems you get. Here's some tips to keep your crypto wallet safe.

How Hackers Hide Behind Trusted Services

Phishing campaigns can hijack legitimate services like Microsoft or Adobe to bypass spam filters and earn user trust

Attackers Personalize Phishing – How About Your Training?

Attackers often craft phishing campaigns based on data they find online about the victims. Why would you miss out on personalizing your phishing training?

5 ways attackers can bypass two-factor authentication

Learn about the most common social engineering tactics that attackers use to bypass two-factor authentication.

Social Engineering—What Is it and How to Prepare For it?

How to prepare your employees to recognize social engineering? We'll explain what it is and what you need to do shield your company from social engineering.

See also :
Resource Hub Home
Research
Stories
News