Security Awareness Blog

Tips, insights, and best practices to help you build a security-first culture.

Spam vs. Phishing: Junk Email Examples and How to Tell Them Apart

What separates spam from phishing, with examples of each and the right way to report both.

Oct 22, 2026Zach EikenberryRead more

Phishing simulation tools compared for MSPs in 2026: Hook Security, usecure, KnowBe4, Phin, Proofpoint, Hoxhunt, Microsoft Defender and Gophish

Phishing Simulation Tools: 8 Compared for MSPs and SMBs (2026)

Oct 22, 2026Zach EikenberryRead more

Human risk management platforms compared for MSPs in 2026: Hook Security, usecure, KnowBe4 HRM+, Living Security, CybSafe, Hoxhunt and Mimecast

Human Risk Management Platforms: 7 Compared for MSPs and SMBs (2026)

Oct 21, 2026Zach EikenberryRead more

Tate Talks S13E2 header: The Claims Pointed at People, with an attack-chain card running from backup to XDR to people, before the click

The Claims Pointed at People: Nick Wolf on Tate Talks (S13E2)

Hook Security VP of Sales Nick Wolf joined The MSP Podcast for Season 13, Episode 2 of Tate Talks.

Oct 19, 2026Zach EikenberryRead more

Three spoofed email sender lines: a CEO display name on a Gmail address, a lookalike domain with rn in place of m, and a mismatched reply-to address

Email Spoofing Examples: 6 Spoofed Emails and How to Spot Them

Six ways attackers fake the sender of an email, with an example of each and the check that catches it.

Oct 16, 2026Zach EikenberryRead more

Phishing simulation click rate benchmarks compared: KnowBe4 33.1% baseline and 4.1% after 12 months, Fortra 5.42% clicks and 10.5% reporting

Phishing Simulation Click Rate Benchmarks: 33%, 5%, or 4%? Why They Disagree

Oct 16, 2026Zach EikenberryRead more

Bar chart: answers naming each security awareness training vendor out of 8 AI assistant answers, October 2026

AI Visibility Benchmark: Which Security Awareness Training Vendors Do AI Assistants Name? (October 2026)

A public benchmark of which security awareness training vendors an AI assistant names for 8 common MSP and SMB buyer questions, measured October 15, 2026.

Oct 15, 2026Zach EikenberryRead more

The five security awareness training records small businesses need for cyber insurance applications and renewals

The Cyber-Insurance Evidence Small Businesses Actually Need from Security Awareness Training

What cyber-insurance carriers actually ask small businesses about security awareness training, and the five records to have ready before you apply, renew, or file.

Oct 15, 2026Zach EikenberryRead more

Comparison of Hook Security and CanIPhish security awareness training for MSPs

Hook Security vs CanIPhish (2026): An Honest Comparison for MSPs

A sourced comparison of Hook Security and CanIPhish for MSPs: managed program vs self-serve simulation, training, measurement, pricing transparency and switching.

Oct 15, 2026Zach EikenberryRead more

Comparison of Hook Security and Breach Secure Now security awareness training for MSPs

Hook Security vs Breach Secure Now: An Honest Comparison for MSPs (2026)

A fair, sourced comparison of Hook Security and Breach Secure Now (BSN) for MSPs: the BSN bundle, scoring vs coaching, reviews, and what switching takes.

Oct 14, 2026Zach EikenberryRead more

Should you punish people who click phishing simulations? Clicks rose from about 7% on easy emails to about 15% on hard ones in Rozema and Davis 2026

Should You Punish Employees Who Fail Phishing Simulations?

Oct 13, 2026Zach EikenberryRead more

Get employees to report phishing: Fortra 2025 benchmark shows 10.5% of recipients reported a simulation, 5.42% clicked and 1.99% submitted credentials

How Do I Get Employees to Report Phishing Emails?

Oct 9, 2026Zach EikenberryRead more