Phishing Research Challenges Conventional Security Awareness Testing

A recent analysis of over 2.47 million simulated phishing attacks suggests that traditional security awareness testing methods may be flawed. The study indicates that organizations should focus on measuring the number of credential leaks and employee reporting of suspicious emails, rather than just tracking the number of clicks on phishing links. This approach may provide a more accurate assessment of an organization's vulnerability to phishing attacks. The research challenges conventional security awareness testing methods, which typically focus on click rates. By measuring credential leaks and reporting, organizations can gain a better understanding of their employees' ability to detect and respond to phishing attempts. This new perspective on security awareness testing could lead to mor