Security Awareness Blog

Tips, insights, and best practices to help you build a security-first culture.

The new Hook is here: a rebuilt platform for MSPs, the 2026 Annual Training and the Hook MCP server

Meet the New Hook: A Rebuilt Platform, the 2026 Annual Training and an MCP Server

PinnedOct 27, 2026Zach EikenberryRead more

How MSPs run phishing simulations across every client: no-blame rule in writing, safelisting, directory sync, one report button and a delivery check per tenant

How to Run Phishing Simulations for MSP Clients

Oct 30, 2026Zach EikenberryRead more

Comparison of Hook Security and CybSafe security awareness training for MSPs and SMBs

Hook Security vs CybSafe: An Honest Comparison for MSPs and SMBs (2026)

Oct 29, 2026Zach EikenberryRead more

Comparison of Hook Security and Hoxhunt security awareness training for MSPs and SMBs

Hook Security vs Hoxhunt: An Honest Comparison for MSPs and SMBs (2026)

Oct 28, 2026Zach EikenberryRead more

How to measure if security awareness training is working: a quarterly scorecard of reporting rate, time to first report, real phishing reported, clicks by difficulty and self-reported mistakes

How to Measure If Security Awareness Training Is Working

Oct 27, 2026Zach EikenberryRead more

Security awareness training employees don't hate, with a four-question demo test: would you watch it voluntarily, how long is the longest module, what happens after a click, does a report get a thank-you

Security Awareness Training That Employees Don't Hate

Oct 23, 2026Zach EikenberryRead more

Two email cards side by side: a junk newsletter from Deals Daily marked Report junk, and a fake laptop order confirmation asking you to sign in marked Report phishing

Spam vs. Phishing: Junk Email Examples and How to Tell Them Apart

What separates spam from phishing, with examples of each and the right way to report both.

Oct 22, 2026Zach EikenberryRead more

Phishing simulation tools compared for MSPs in 2026: Hook Security, usecure, KnowBe4, Phin, Proofpoint, Hoxhunt, Microsoft Defender and Gophish

Phishing Simulation Tools: 8 Compared for MSPs and SMBs (2026)

Oct 22, 2026Zach EikenberryRead more

Human risk management platforms compared for MSPs in 2026: Hook Security, usecure, KnowBe4 HRM+, Living Security, CybSafe, Hoxhunt and Mimecast

Human Risk Management Platforms: 7 Compared for MSPs and SMBs (2026)

Oct 21, 2026Zach EikenberryRead more

Tate Talks S13E2 header: The Claims Pointed at People, with an attack-chain card running from backup to XDR to people, before the click

The Claims Pointed at People: Nick Wolf on Tate Talks (S13E2)

Hook Security VP of Sales Nick Wolf joined The MSP Podcast for Season 13, Episode 2 of Tate Talks.

Oct 19, 2026Zach EikenberryRead more

Three spoofed email sender lines: a CEO display name on a Gmail address, a lookalike domain with rn in place of m, and a mismatched reply-to address

Email Spoofing Examples: 6 Spoofed Emails and How to Spot Them

Six ways attackers fake the sender of an email, with an example of each and the check that catches it.

Oct 16, 2026Zach EikenberryRead more

Phishing simulation click rate benchmarks compared: KnowBe4 33.1% baseline and 4.1% after 12 months, Fortra 5.42% clicks and 10.5% reporting

Phishing Simulation Click Rate Benchmarks: 33%, 5%, or 4%? Why They Disagree

Oct 16, 2026Zach EikenberryRead more