248 - The Truth About Security Awareness Training- Why 95% of Programs Don't Work

YusufOnSecurity.com

Enjoying the content? Let us know your feedback!

Today we're diving into something that keeps cybersecurity professionals up at night, and no, it's not the latest ransomware attack or data breach. It's something much more frustrating: the fact that despite spending billions of dollars on security awareness training every year, employees keep clicking on phishing emails, using weak passwords, and falling for social engineering attack.

- https://www.sans.org: Security Awareness Training
- https://www.verizon.com: 2025 Data Breach Investigations Report

- https://ebbinghausmuseum.org: The Forgetting Curve

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.