phishing simulation
September 11, 2026 | 15 min
Ten Employees Clicked the Fake Invoice: Phishing Simulation at a Singapore Trading Company
A composite scenario from Singapore: a 70-person trading company runs its first phishing simulation almost as an afterthought, and ten people click a fake supplier invoice in a single afternoon. How to read a first click-rate, why zero reports is a worse signal than ten clicks, and why the programme — not the platform licence — is the thing that changes outcomes.
September 04, 2026 | 15 min
The Invoice That Almost Went Through
A composite scenario from Hong Kong: a small marketing agency nearly pays a fraudulent supplier invoice, caught only because a staff member happens to phone to confirm. Why the one cybersecurity video every new hire watches once isn't training, and what a managed, measured awareness programme changes instead.