Red Team Diary: From a Single Phishing Email to Domain Admin in Six Days
A representative red team assessment, told day by day: how one convincing phishing email turned into domain admin in six days, and the three controls that would have stopped us cold.
Read more
Phishing Simulations Done Right: Measuring Human Risk
A gotcha email that shames the people who click teaches nothing. Here is how we run a phishing simulation that measures human risk and moves the numbers that matter: report rate, dwell time, and repeat clickers.
Read more
