Cybersecurity Today In-Depth Look at Phishing and Cybersecurity Culture with David Shipley | Cybersecurity Today
14 snips
Jan 31, 2026 David Shipley, CEO of Beauceron Security and phishing researcher, discusses large-scale research into phishing, training, and security culture. They cover why simulations can mislead, how psychology and AI boost phishing, why small companies sometimes win, and how management tone and reporting nudges reshape organizational security.
AI Snips
Chapters
Transcript
Episode notes
Click Risk Grows As Time From Training Passes
- Click probability rises with time since training: very low immediately after training and sharply increases over months.
- The lapse is willingness/attention, not pure knowledge decay, so timing matters.
Legitimacy And Expectation Drive Clicks
- Major reasons people clicked were that messages looked legitimate or matched expectations.
- Expectation and realism in messages are as powerful as technical indicators of phishing.
AI Vastly Boosts Phishing Quality
- AI and phishing-as-a-service have leveled attacker capabilities for grammar, formatting, and personalization.
- Attackers can combine big breached datasets with AI to craft highly plausible, targeted lures.