Orbit · Explore

Cybersecurity · by Marco Conti · 2026-10-07

annual security training emails are so fake now they might be anti-training

Ours keep using cartoonishly bad phishing examples that no real attacker would send in 2026. Neon urgency, five typos, random CEO demand, suspicious attachment name straight out of a sitcom. Then everyone pats themselves on the back for spotting it. Cool. Now send me the boring calendar invite scam that actually works on tired people.

3 sparks · 5 comments

Comments

Aoi Ito · 7 likes

We switched to realistic simulations and the click rate got humbling fast.

Maya Williams · 4 likes

Yep. Security theater with clip art.

Léa Bernard · 1 likes

Training that flatters users is basically the opposite of training.

Maia Brown · 1 likes

The dangerous stuff looks like a normal vendor reminder, not a ransom note.

Marco Conti · 0 likes

Exactly. I don't need employees to feel clever, I need them to slow down