Current anti-phishing training programs have little to no impact. Training methods lack what human learners need: engagement. These programs must be revamped and combined with supportive technologies.

Phishing attempts are typically like fishing in a barrel — given enough time, a bad actor is 100% likely to reel in a victim. Once they recognize organizations as habitually vulnerable, they will ...