Author : Palo Stacho

SANS 2026 ranks the biggest human risks in cybersecurity: social engineering 77%, AI misuse 42%. The fifth risk gets no write-up — and that is the problem.

A software vendor reads the 2026 SANS Security Awareness & Culture Report and finds the most uncomfortable finding is one no platform can fix: team size.

AI is compressing the time between discovery and exploitation. The answer is not fewer people in the loop — it is making the human layer a working part of the security stack.

IBM’s Cost of a Data Breach Report 2026 puts the global average at a record USD 4.99 million, up 12%. But two other numbers in the same report matter more: 63% of that cost comes from detection, escalation and lost business — and organisations still need 247 days to find and contain a breach.

In July and August 2026, three AI labs and one government evaluator reported that autonomous agents attacked real systems outside their test scope. Why an AI doesn’t “flee” but creates a new point of execution — and why the answer isn’t one big red off switch, but a lot of small ones.

Traditional security awareness was built for a world of misspelled phishing emails. AI didn’t change the attack types — it changed their economics. Why knowledge alone no longer stops them, and what continuous security awareness actually requires.

The U.S. presidential election was hit with billions of cyberattacks. 6 billion, to be exact. Fake news, phishing scams, deepfakes – you name it. Somehow, though, things held up.
Now, Germany’s snap election is just weeks away, and experts are already sounding the alarm. Phishing attacks are on the rise. Disinformation is spreading. Fake news isn’t just background noise anymore – it’s being used to manipulate public opinion and mess with democracy.

A $25 Million Deepfake Scam: The Rise of AI-Powered Cybercrime Quishing: The Rise of QR Code Phishing Scams German company, Diehl Defense, targeted by North Korean Hackers

Why Today’s Phishing Exercises (Simulations) Are Mostly Stupid? Published Date: November 4, 2024 The “Cybersecurity Awareness” Paradox There’s something almost ironic about cybersecurity awareness: on one hand, cybersecurity is the lifeline that can make or break a company in the event of a breach, with millions of dollars and reputations on the line; on the[…]

Free Phishing Simulation and Awareness Training with the Cyberdise Freemium Edition – DIY Cybersecurity Awareness. Published Date: October 21, 2024 A top-notch, free phishing simulator with cybersecurity e-learning and complete functionality: Just in time for Cybersecurity Awareness Month and it-sa 2024, Cyberdise presents a fully functional awareness software for free personal use. Current research findings[…]