Topic
Human Risk
Your Click Rate Cannot See A Deepfake Coming
A low click rate on your phishing simulations does not mean your organisation is safe. It measures one narrow behaviour, while deepfake calls and cloned voices now move money without a single click ever happening.
Why Your Phishing Click Rate Tells The Board Nothing Useful
Click rate is the metric every board sees, and it predicts almost nothing about whether your organisation would catch a genuine phishing attack. Reporting speed, repeat-clicker concentration and click-to-report ratio predict far more.
Why smart people click: fifteen years of watching it happen
Phishing is not a knowledge problem. The people who click are usually the ones doing their jobs properly, and that is exactly what the attack is built to exploit.