Blog – EN

AI is compressing the time between discovery and exploitation. The answer is not fewer people in the loop — it is making the human layer a working part of the security stack.

IBM’s Cost of a Data Breach Report 2026 puts the global average at a record USD 4.99 million, up 12%. But two other numbers in the same report matter more: 63% of that cost comes from detection, escalation and lost business — and organisations still need 247 days to find and contain a breach.

In July and August 2026, three AI labs and one government evaluator reported that autonomous agents attacked real systems outside their test scope. Why an AI doesn’t “flee” but creates a new point of execution — and why the answer isn’t one big red off switch, but a lot of small ones.

Traditional security awareness was built for a world of misspelled phishing emails. AI didn’t change the attack types — it changed their economics. Why knowledge alone no longer stops them, and what continuous security awareness actually requires.

Most “cyber attack” infographics mix malware families, attack techniques, vulnerabilities and threat actors into one confusing list. Here is a practical 8-category taxonomy for 2026 that classifies attacks by the primary attack vector — and what AI really changed.

Vishing calls using AI-cloned voices bypass even the strongest security culture. Why a realistic vishing simulation is becoming the new line of defense — and how to make your team genuinely resilient on the phone.

Picture this: your phone rings. The display shows your CEO’s name. When you pick up, you hear her exact voice, clear and crisp. She’s at the airport, in a hurry, and asks you to approve a multi-factor authentication (MFA) prompt right now so she can log in to an urgent board meeting.

Would your employees comply? In most organizations, the honest answer is: “Maybe” (read: yes). This is exactly the reaction a realistic vishing simulation makes visible — before a real attacker does.

Do you know the hidden risks of your own authority? Cybersecurity doesn’t end with firewalls; it begins with corporate culture. An insight into the mechanisms of how a lack of psychological safety drastically prolongs response times during cyber incidents – and how modern leadership changes the game.
I only started reading genuinely interesting non-fiction books once I was tasked with leadership responsibilities. Since then, a few works have fundamentally shaped me and influenced my entire life. Today, let’s look at two of my most important non-fiction books and the impact they had on me. On top of that, I find it fascinating that, in my opinion, both also have a massive impact on an organization’s cybersecurity when they become part of the company’s core management literature.

Cybercriminals have become remarkably good at bypassing technical security controls. Rather than exploiting software vulnerabilities, many modern attacks exploit something much easier: human behavior.
One of the fastest-growing examples is ClickFix. Instead of asking users to click a malicious attachment, attackers guide them through what appears to be a legitimate troubleshooting or verification process. The victim ultimately executes the malicious action themselves.
For security awareness teams, this represents an important shift. Traditional phishing exercises are still valuable, but they no longer cover the full spectrum of modern social engineering. Organizations increasingly need a ClickFix simulation that prepares employees for these interaction-driven attacks before they encounter them in production. This article shows how to create one in Cyberdise Awareness — from scenario selection to delivery and measurement.

What happens when technical vulnerabilities disappear in the future – and humans become the primary target? There’s a lot of talk right now about AI becoming the better hacker. What often gets overlooked: that’s only the first phase. A proverbial cybercrime Zeitenwende begins after that.

For years, the global cybersecurity industry has been fighting the right problem with the wrong methods. While traditional security awareness programs have focused on theoretical knowledge transfer for two decades, measurable organizational risk remains consistently high. A joint study by CYBERDISE and the Lucerne University of Applied Sciences and Arts (HSLU) scientifically confirms what practice has long shown: more knowledge does not automatically translate into secure behavior when employees are targeted by real, psychologically optimized attacks.