Straightforward GRC Blog
Security Awareness Training Articles
Annual awareness training lands better with real cases than with abstract warnings. Each article explains how one attack works, then lists recent incidents from a range of industries, with links to the original advisories and reports.

ClickFix attack examples for security awareness training
A ClickFix attack shows a fake "verify you are human" check that tells the user to paste and run a command. This post explains how the attack works on Windows and Mac and how to spot it, with eight real incidents to use in awareness training.

Deepfake fraud examples for security awareness training
Deepfake fraud puts a cloned executive's voice or face behind a familiar payment request. Seven deepfake fraud examples from 2023 to 2025 show how the attack runs and what stopped it.

North Korean hiring scam examples for security awareness training
How fake job interview malware and North Korean IT worker scams work, the warning signs, and seven real incidents for awareness training.

Typosquatting and slopsquatting examples for security awareness training
Typosquatting and slopsquatting hide malware behind a misspelled or AI-invented name. This post explains how they work and the warning signs, with six real typosquatting and slopsquatting examples.

Vishing examples for security awareness training
Seven real vishing examples, from MGM and Harvard to Cisco, plus how the attack works and how to spot a call, for security awareness training.
Explore Kordon in a ready-made demo
Enter your email and we'll send your personal demo link immediately. Your single-user instance comes preloaded with demo data. No credit card required.