Field notes: Human risk
Human risk posts
Hacking the Human Operating System: The Core Behavioral Biases That Make Smart People Click
Why do employees still click phishing links? Threat actors now weaponize social engineering psychology and behavioral biases to bypass human judgment.
The Click Rate Is Lying to Your Board| Four Metrics that Actually Measure
Stop relying on deceptive phishing click rates. Learn how the Verification Resilience Framework replaces vanity metrics with 4 outcome-based risk controls.
Your Users Aren’t the Weak Link. They’re the Wrong Metric.
Your users aren't the weak link — they're the wrong metric. Karen Letain, CCO at StrongestLayer, introduces the Human Exposure Maturity Model: a four-level framework for protecting the human layer against agentic AI attacks in 2026.
The April Fools Paradox: The Ultimate Stress Test for Human Skepticism
April Fools proves that human alertness has a ceiling. Discover how StrongestLayer uses structured AI reasoning and institutional prerequisites to defeat sophisticated BEC attacks that legacy security training can’t stop.
Stop Paying for Annual Phishing Simulations: The Death of Legacy Security Training at RSA 2026
Looking for phishing simulation alternatives? Learn why legacy security awareness training fails against AI threats and how real-time coaching protects your SOC.
AI-Powered Human Risk Modeling: Identifying and Securing Vulnerable Users
Identify and protect vulnerable users with AI-powered human risk modeling. Prioritize coaching, reduce phishing exposure, and prove people-centric security.
Phishing Simulations: A Practical Guide for Law Firms
Run ethical, effective phishing simulations built for law firms—governance, metrics, and culture in one actionable guide.
Complete Guide to (HLS) Human Layer Security
Humans are your top risk—and defense. This guide shows how Human Layer Security with AI can turn users into your strongest cybersecurity asset.
Top 7 Human-Driven Phishing Defense Solutions
While advanced technologies like AI and machine learning play a vital role in cybersecurity, human-driven solutions remain a critical component in defending against phishing attacks.
10 AI Phishing Simulation Scenarios to Test Your Team
Learn 10 realistic AI phishing simulation exercises to train your team in spotting modern attacks. From ChatGPT-crafted HR emails to deepfake CEO scams, we cover scenario details, why they work, and best practices for engaging simulations.
How AI is Transforming Security Awareness Training in the Modern Workplace
This blog explores how AI is revolutionizing security awareness training and why it’s crucial for the modern workplace.
From Click to Shield: Transforming Employees into AI Phishing Hunters
Employee training for AI‑assisted scams: empower your workforce with real‑time phishing simulations and behavior‑based microlearning to outsmart AI‑generated threats.
US Employee Resilience: Unmasking Malicious Phishing Tactics
Malicious actors are hiding their identity behind redacted whois information and leverage publicly available cloud platforms to create, prepare, weaponize then redirect ultra realistic and relevant campaigns, evading detection.
How Microsoft Phishing Campaigns Bypass Security Awareness: A Deep Dive into Advanced Threats
Traditional security awareness training often teaches users to analyze URLs and language and design inconsistencies in phishing sites. Attackers know this approach and continually evolve their tactics to bypass these defenses.
Reducing Cyber Risks Through Behavior Change: The Security-Conscious Culture in 2025
Despite decades of security awareness programs, many organizations still face challenges in achieving their intended outcomes.
Nothing matches “”. Try a broader word, or
Do you have an AI gap? Find out what’s getting through.
See which generations of defense you’re running and what it takes to close the gap. Two minutes. No signup. Nothing changes in your environment.