Cyber Compliance & Beyond · 2026-04-07 · 48 min
Phishing has been one of the most reliable tools in an attacker's arsenal for decades. Despite endless simulations, mandatory trainings and a growing set of tools, the problem hasn't gone away. AI-driven targeting makes it smarter, faster and more personal. But the issue isn't just the threat itself. It's how we teach people to recognize and respond to it. In this episode, we sit down with Craig Taylor, a 30-year cybersecurity veteran and co-founder of CyberHoot, to explore why traditional phishing exercises fail to change behavior and how shame-based or punitive approaches are undermining security culture. Craig explains how a multidisciplinary, psychology-backed approach can transform user engagement, reward good behavior and build real security resilience. Whether you're leading a security program, responsible for awareness training, or simply curious about how phishing has evolved in the age of AI, this conversation will change the way you think about user education.
30 - Teaching AI to Protect CUI58 / 100
29 - Modernizing the Shop Floor: Security, Efficiency and Survival
28 - Keeping OT Safe, Secure and Online
27 - CUI Discovery for CMMC Compliance
26 - Fixing What Breaks CMMC Assessments