Blog – EN

A TerminalFix attack was the way into Berlin’s Senate network: a fake Cloudflare CAPTCHA, a PowerShell command pasted from the clipboard, and a decisive step taken by a human. Here is how to train for exactly that path.

SANS 2026 ranks the biggest human risks in cybersecurity: social engineering 77%, AI misuse 42%. The fifth risk gets no write-up — and that is the problem.

A software vendor reads the 2026 SANS Security Awareness & Culture Report and finds the most uncomfortable finding is one no platform can fix: team size.

AI is compressing the time between discovery and exploitation. The answer is not fewer people in the loop — it is making the human layer a working part of the security stack.

IBM’s Cost of a Data Breach Report 2026 puts the global average at a record USD 4.99 million, up 12%. But two other numbers in the same report matter more: 63% of that cost comes from detection, escalation and lost business — and organisations still need 247 days to find and contain a breach.

In July and August 2026, three AI labs and one government evaluator reported that autonomous agents attacked real systems outside their test scope. Why an AI doesn’t “flee” but creates a new point of execution — and why the answer isn’t one big red off switch, but a lot of small ones.

Traditional security awareness was built for a world of misspelled phishing emails. AI didn’t change the attack types — it changed their economics. Why knowledge alone no longer stops them, and what continuous security awareness actually requires.

Most “cyber attack” infographics mix malware families, attack techniques, vulnerabilities and threat actors into one confusing list. Here is a practical 8-category taxonomy for 2026 that classifies attacks by the primary attack vector — and what AI really changed.

Vishing calls using AI-cloned voices bypass even the strongest security culture. Why a realistic vishing simulation is becoming the new line of defense — and how to make your team genuinely resilient on the phone.

Picture this: your phone rings. The display shows your CEO’s name. When you pick up, you hear her exact voice, clear and crisp. She’s at the airport, in a hurry, and asks you to approve a multi-factor authentication (MFA) prompt right now so she can log in to an urgent board meeting.

Would your employees comply? In most organizations, the honest answer is: “Maybe” (read: yes). This is exactly the reaction a realistic vishing simulation makes visible — before a real attacker does.

Do you know the hidden risks of your own authority? Cybersecurity doesn’t end with firewalls; it begins with corporate culture. An insight into the mechanisms of how a lack of psychological safety drastically prolongs response times during cyber incidents – and how modern leadership changes the game.
I only started reading genuinely interesting non-fiction books once I was tasked with leadership responsibilities. Since then, a few works have fundamentally shaped me and influenced my entire life. Today, let’s look at two of my most important non-fiction books and the impact they had on me. On top of that, I find it fascinating that, in my opinion, both also have a massive impact on an organization’s cybersecurity when they become part of the company’s core management literature.