2024 preprint on spear phishing automation<\/a>, tested four email groups against 101 participants. Generic phishing drew a 12% click-through rate. Emails written by human experts drew 54%. Fully AI-automated emails drew 54% as well, and AI with a human in the loop drew 56%.<\/p>\n\n\n\nTwo findings inside that study matter more than the headline. The automated tool gathered accurate and useful intelligence on 88% of targets and produced inaccurate profiles for only 4%. And the economic analysis found AI automation raised phishing profitability by up to 50 times for large campaigns.<\/p>\n\n\n\n
Read together, those numbers say something specific. AI did not make attackers better than expert humans. It made an expert-quality attack available at commodity cost, against every employee rather than a chosen few. A campaign that once justified research effort against 5 executives can now run against 5,000 staff with individually researched pretexts. Understanding how an email attack is actually constructed<\/a> matters more than ever, because the construction is now industrial.<\/p>\n\n\n\n\n\nThreatcop \u2013 Book a Free Demo<\/title>\n<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Outfit:wght@300;400;500;600;700&display=swap\" rel=\"stylesheet\">\n<style>\n .tc-wrap , .tc-wrap ::before, .tc-wrap ::after { box-sizing: border-box; margin: 0; padding: 0; }\n .tc-wrap { font-family: 'Outfit', sans-serif; width: 100%; display: flex; justify-content: center; padding: 20px 10px; }\n .tc-card { width: 100%; max-width: 820px; background: #fff; border-radius: 20px; overflow: hidden; box-shadow: 0 20px 60px rgba(24,57,148,0.13), 0 4px 16px rgba(24,57,148,0.07); display: flex; flex-direction: row; }\n .tc-left { background: linear-gradient(160deg, #1e44b0 0%, #183994 40%, #0e2570 100%); width: 320px; flex-shrink: 0; padding: 40px 32px; display: flex; flex-direction: column; justify-content: center; position: relative; overflow: hidden; }\n .tc-left::before { content: ''; position: absolute; inset: 0; background-image: radial-gradient(rgba(255,255,255,0.08) 1.5px, transparent 1.5px); background-size: 22px 22px; }\n .tc-left::after { content: ''; position: absolute; bottom: -60px; right: -60px; width: 220px; height: 220px; background: radial-gradient(circle, rgba(99,179,255,0.22) 0%, transparent 65%); border-radius: 50%; pointer-events: none; }\n .tc-panel-inner { position: relative; z-index: 1; }\n .tc-badge { display: inline-flex !important; align-items: center !important; gap: 6px; background: rgba(255,255,255,0.1) !important; border: 1px solid rgba(255,255,255,0.18) !important; border-radius: 20px !important; padding: 4px 14px 4px 10px !important; font-size: 12.5px !important; font-weight: 600 !important; letter-spacing: .09em !important; text-transform: uppercase !important; color: rgba(255,255,255,0.85) !important; margin-bottom: 18px !important; font-family: 'Outfit', sans-serif !important; line-height: 1.4 !important; }\n .tc-badge-dot { width: 6px; height: 6px; background: #5cd9a0; border-radius: 50%; box-shadow: 0 0 6px #5cd9a0; flex-shrink: 0; display: inline-block; }\n .tc-left h1, .tc-left h2, .tc-left h3, .tc-left h4, .tc-left h5, .tc-left h6 { color: #ffffff !important; font-family: 'Outfit', sans-serif !important; font-size: 28px !important; font-weight: 700 !important; line-height: 1.35 !important; letter-spacing: -0.3px !important; margin: 0 !important; padding: 0 !important; background: none !important; -webkit-text-fill-color: #ffffff !important; }\n .tc-left h2 em { font-style: normal !important; color: #7ec8ff !important; -webkit-text-fill-color: #7ec8ff !important; }\n .tc-left p, .tc-left .tc-sub { color: rgba(255,255,255,0.78) !important; -webkit-text-fill-color: rgba(255,255,255,0.78) !important; font-family: 'Outfit', sans-serif !important; font-size: 14px !important; font-weight: 300 !important; line-height: 1.65 !important; margin-top: 12px !important; background: none !important; }\n .tc-right { flex: 1; padding: 32px 32px 28px; display: flex; flex-direction: column; justify-content: center; }\n .tc-form-title { font-size: 13px !important; font-weight: 600 !important; letter-spacing: .12em; text-transform: uppercase; color: #8fa4cc !important; margin-bottom: 20px !important; display: flex !important; align-items: center !important; gap: 10px; font-family: 'Outfit', sans-serif !important; }\n .tc-form-title::after { content: ''; flex: 1; height: 1px; background: #eef1fa; }\n .tc-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 14px; }\n .tc-field { display: flex; flex-direction: column; gap: 5px; }\n .tc-field.full { grid-column: 1 \/ -1; }\n .tc-field label { font-size: 13px !important; font-weight: 600 !important; color: #3a4f7a !important; letter-spacing: .04em; text-transform: uppercase; font-family: 'Outfit', sans-serif !important; display: block !important; }\n .tc-input-wrap { position: relative; display: flex; align-items: center; }\n .tc-input-wrap .tc-fi { position: absolute; right: 12px; width: 15px; height: 15px; stroke: #c0ccdf; stroke-width: 1.8; pointer-events: none; fill: none; }\n .tc-wrap input[type=\"text\"], .tc-wrap input[type=\"email\"], .tc-wrap input[type=\"number\"] { width: 100% !important; border: 1.5px solid #e2e9f7 !important; border-radius: 10px !important; padding: 9px 34px 9px 13px !important; font-family: 'Outfit', sans-serif !important; font-size: 15px !important; font-weight: 400 !important; color: #1e2d50 !important; background: #f8faff !important; outline: none !important; transition: border-color .2s, background .2s, box-shadow .2s; -moz-appearance: textfield; box-shadow: none !important; -webkit-text-fill-color: #1e2d50 !important; }\n .tc-wrap input[type=\"number\"]::-webkit-inner-spin-button, .tc-wrap input[type=\"number\"]::-webkit-outer-spin-button { -webkit-appearance: none; }\n .tc-wrap input::placeholder { color: #c0ccdf !important; -webkit-text-fill-color: #c0ccdf !important; opacity: 1; }\n .tc-wrap input:focus { border-color: #183994 !important; background: #fff !important; box-shadow: 0 0 0 3.5px rgba(24,57,148,0.1) !important; }\n .tc-phone-row { display: flex; gap: 8px; }\n .tc-flag-select { position: relative; flex-shrink: 0; }\n .tc-flag-select select { appearance: none !important; -webkit-appearance: none !important; border: 1.5px solid #e2e9f7 !important; border-radius: 10px !important; padding: 9px 26px 9px 12px !important; font-family: 'Outfit', sans-serif !important; font-size: 14px !important; font-weight: 500 !important; color: #1e2d50 !important; background: #f8faff !important; outline: none !important; cursor: pointer; width: 100px !important; transition: border-color .2s, box-shadow .2s; }\n .tc-flag-select select:focus { border-color: #183994 !important; box-shadow: 0 0 0 3.5px rgba(24,57,148,0.1) !important; }\n .tc-flag-select::after { content: ''; position: absolute; right: 10px; top: 50%; transform: translateY(-50%); width: 0; height: 0; border-left: 4px solid transparent; border-right: 4px solid transparent; border-top: 5px solid #a0b0cc; pointer-events: none; }\n .tc-phone-row .tc-input-wrap { flex: 1; }\n .tc-btn-submit { width: 100% !important; margin-top: 18px !important; padding: 11px !important; background: #183994 !important; border: none !important; border-radius: 10px !important; color: #fff !important; -webkit-text-fill-color: #fff !important; font-family: 'Outfit', sans-serif !important; font-size: 15px !important; font-weight: 600 !important; letter-spacing: .05em; cursor: pointer; display: flex !important; align-items: center !important; justify-content: center !important; gap: 9px; transition: background .2s, transform .15s, box-shadow .2s; box-shadow: 0 6px 24px rgba(24,57,148,0.28) !important; text-decoration: none !important; }\n .tc-btn-submit:hover { background: #1d46b5 !important; transform: translateY(-1px); box-shadow: 0 10px 32px rgba(24,57,148,0.35) !important; color: #fff !important; }\n .tc-btn-submit:active { transform: translateY(0); }\n .tc-btn-submit svg { width: 16px; height: 16px; stroke: #fff; stroke-width: 2.2; fill: none; flex-shrink: 0; }\n .tc-trust { margin-top: 10px !important; display: flex !important; align-items: center !important; justify-content: center !important; gap: 5px; font-size: 13px !important; color: #a0b0cc !important; font-family: 'Outfit', sans-serif !important; }\n .tc-trust svg { width: 12px; height: 12px; stroke: #a0b0cc; stroke-width: 2; fill: none; flex-shrink: 0; }\n @media (max-width: 680px) {\n .tc-card { flex-direction: column !important; }\n .tc-left { width: 100% !important; padding: 28px 24px 24px !important; }\n .tc-right { padding: 24px 20px !important; }\n .tc-grid { grid-template-columns: 1fr !important; }\n .tc-field.full { grid-column: 1 !important; }\n }\n<\/style>\n\n<div class=\"tc-wrap\">\n <div class=\"tc-card\">\n <div class=\"tc-left\">\n <div class=\"tc-panel-inner\">\n <div class=\"tc-badge\">\n <span class=\"tc-badge-dot\"><\/span>\n People Security Management\n <\/div>\n <h2><span class=\"ez-toc-section\" id=\"Book_a_Free_Demo_Call_with_Our_Expert\"><\/span>Book a Free<br><em>Demo Call<\/em><br>with Our Expert<span class=\"ez-toc-section-end\"><\/span><\/h2>\n <p class=\"tc-sub\">Discover how Threatcop protects your workforce from modern cyber threats.<\/p>\n <\/div>\n <\/div>\n <div class=\"tc-right\">\n <div class=\"tc-form-title\">Your Details<\/div>\n <form action=\"https:\/\/threatcop.com\/thankyou-blog\" method=\"get\" target=\"_blank\">\n <input type=\"hidden\" name=\"BlogForm\" value=\"BlogForm\">\n <input type=\"hidden\" name=\"PageSource\" id=\"tc-page-source\" value=\"\">\n <div class=\"tc-grid\">\n <div class=\"tc-field\">\n <label>Full Name<\/label>\n <div class=\"tc-input-wrap\">\n <input type=\"text\" name=\"FullName\" placeholder=\"Jane Smith\" required=\"\">\n <svg class=\"tc-fi\" viewBox=\"0 0 24 24\" stroke-linecap=\"round\"><circle cx=\"12\" cy=\"8\" r=\"4\"><\/circle><path d=\"M4 20c0-4 3.58-7 8-7s8 3 8 7\"><\/path><\/svg>\n <\/div>\n <\/div>\n <div class=\"tc-field\">\n <label>Company Name<\/label>\n <div class=\"tc-input-wrap\">\n <input type=\"text\" name=\"CompanyName\" placeholder=\"Acme Corp\" required=\"\">\n <svg class=\"tc-fi\" viewBox=\"0 0 24 24\" stroke-linecap=\"round\"><rect x=\"3\" y=\"3\" width=\"18\" height=\"18\" rx=\"2\"><\/rect><path d=\"M9 3v18M3 9h6M3 15h6\"><\/path><\/svg>\n <\/div>\n <\/div>\n <div class=\"tc-field full\">\n <label>Corporate Email<\/label>\n <div class=\"tc-input-wrap\">\n <input type=\"email\" name=\"email\" placeholder=\"jane@yourcompany.com\" required=\"\">\n <svg class=\"tc-fi\" viewBox=\"0 0 24 24\" stroke-linecap=\"round\"><rect x=\"2\" y=\"4\" width=\"20\" height=\"16\" rx=\"2\"><\/rect><polyline points=\"2,4 12,13 22,4\"><\/polyline><\/svg>\n <\/div>\n <\/div>\n <div class=\"tc-field full\">\n <label>Phone Number<\/label>\n <div class=\"tc-input-wrap\">\n <input type=\"number\" name=\"Phone\" placeholder=\"98765 43210\" required=\"\">\n <svg class=\"tc-fi\" viewBox=\"0 0 24 24\" stroke-linecap=\"round\"><path d=\"M22 16.92v3a2 2 0 01-2.18 2A19.79 19.79 0 013.09 4.18 2 2 0 015.07 2h3a2 2 0 012 1.72c.13.96.36 1.9.71 2.81a2 2 0 01-.45 2.11L9.09 9.91a16 16 0 006 6l1.27-1.27a2 2 0 012.11-.45c.91.35 1.85.58 2.81.71A2 2 0 0122 16.92z\"><\/path><\/svg>\n <\/div>\n <\/div>\n <\/div>\n <button type=\"submit\" class=\"tc-btn-submit\">\n <svg viewBox=\"0 0 24 24\" stroke-linecap=\"round\"><path d=\"M22 2L11 13M22 2L15 22l-4-9-9-4 20-7z\"><\/path><\/svg>\n Book My Free Demo\n <\/button>\n <div class=\"tc-trust\">\n <svg viewBox=\"0 0 24 24\" stroke-linecap=\"round\"><rect x=\"3\" y=\"11\" width=\"18\" height=\"11\" rx=\"2\"><\/rect><path d=\"M7 11V7a5 5 0 0110 0v4\"><\/path><\/svg>\n Your data is safe & never shared with third parties\n <\/div>\n <\/form>\n <\/div>\n <\/div>\n<\/div>\n<script>document.getElementById('tc-page-source').value = window.location.href;<\/script>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"AI-Generated_Phishing_Removes_the_Signals_Employees_Were_Trained_to_Find\"><\/span>AI-Generated Phishing Removes the Signals Employees Were Trained to Find<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">AI-generated phishing defeats detection training because the training was built around production defects, not around deception itself. Poor grammar, awkward phrasing, wrong idiom, and generic salutations were never intrinsic to phishing. They were artifacts of attackers writing in a second language at speed, and a language model removes all of them for free.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That undermines most of <a href=\"https:\/\/threatcop.com\/blog\/how-to-recognize-phishing-emails\/\">the warning signs employees are taught to look for<\/a>. A model given a target’s role, employer, recent LinkedIn activity, and a scraped vendor list produces a message that matches internal register, references real projects, and arrives with plausible timing. There is no spelling error to catch.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The practical consequence for a security program is a shift from detection to process. Detection asks an employee whether a message looks suspicious, which is a judgment AI content is designed to defeat. Process asks a different question: did this request arrive through a channel that can be faked, and does it involve money, credentials, access, or data? If the answer to both is yes, the response is verification through a separate known channel regardless of how convincing the message is. That rule survives improvements in generation quality because it never depended on the message looking wrong.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Deepfake_Voice_and_Video_Fraud_Is_the_Largest_AI_Attack_Category\"><\/span>Deepfake Voice and Video Fraud Is the Largest AI Attack Category<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Deepfake impersonation is the most common form of AI-driven attack recorded in IBM’s 2026 Cost of a Data Breach Report, ranking above AI-enabled malware and AI-generated phishing. The FBI’s Internet Crime Complaint Center put numbers to the consumer and business exposure for the first time in its 2025 Internet Crime Report, released in April 2026: 22,364 complaints referenced artificial intelligence, with $893 million in adjusted losses. Investment fraud accounted for $632 million of that, business email compromise for $30 million, and technology support scams for $19.5 million.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Voice is the cheapest vector to attack. Current cloning systems need only a few seconds of clear speech, which any recorded webinar, earnings call, or voicemail greeting supplies. A clone of a finance director asking a controller to confirm a payment instruction costs an attacker almost nothing and arrives on a channel most organizations never simulate. The mechanics of <a href=\"https:\/\/threatcop.com\/blog\/how-is-voice-cloning-used-by-cybercriminals\/\">how voice cloning is used by cybercriminals<\/a> are now well documented, and the defense is procedural rather than perceptual.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One category deserves separate attention because the loss figure understates it. The FBI recorded roughly $13 million in losses to AI-enabled employment fraud, where voice spoofing and video deepfakes were used during remote job interviews. The report notes that financial theft is often not the objective. The objective is a provisioned account, a laptop, and legitimate network access under an assumed identity, which converts a hiring process into an initial access vector.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Most organizations simulate email and nothing else, which is why their measured risk and their real risk diverge. Verizon’s 2026 DBIR reported that engagement rates in mobile and voice-based phishing simulations ran 40% higher than email simulations, and noted how few organizations run those simulations at all. Understanding <a href=\"https:\/\/threatcop.com\/blog\/ai-vishing-what-it-is-and-how-it-works\/\">how AI vishing attacks work in practice<\/a> is the first step to simulating them, and simulation is how that blind spot gets measured rather than assumed.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Agentic_AI_Has_Started_Running_Intrusions_Not_Just_Writing_Lures\"><\/span>Agentic AI Has Started Running Intrusions, Not Just Writing Lures<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Agentic AI attacks use models that plan and execute multi-step intrusions with limited human direction, and the first confirmed cases are now public record. In November 2025, Anthropic reported a cyber espionage campaign it tracked as GTG-1002, in which AI executed an estimated 80% to 90% of tactical operations against roughly 30 targeted organizations, with human operators involved at only a handful of decision points per campaign.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One detail in that campaign matters more to a security team than the automation percentage. The operators bypassed the model’s safety controls by social engineering the model itself, presenting it with a pretext that it was performing authorized penetration testing for a legitimate security firm. Pretexting did not disappear from the attack chain. It moved one layer up and was aimed at software instead of staff.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The pattern has continued. Taiwan’s Ministry of Digital Affairs confirmed in August 2026 that a near-autonomous AI campaign in July 2026 mapped 21 connected government systems, compromised 85 accounts, and exfiltrated more than 2,564 personnel records in about four days. Tenable’s research team has since tracked a cluster of seven confirmed agentic AI offensive incidents spanning November 2025 to August 2026, and reports that the common entry condition across them is identity and authentication exposure: discoverable federation endpoints, weak credentials, and misconfigured single sign-on.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That last point is the actionable one. Autonomous agents did not defeat strong identity controls. They found weak ones faster than a human team would have, which means the exposure being punished is one most organizations already knew about. Treating agent-driven activity inside <a href=\"https:\/\/threatcop.com\/blog\/ai-risk-management-framework-rmf\/\">a structured AI risk management framework<\/a> puts it alongside existing identity and access work rather than in a separate panic category.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Shadow_AI_Turns_Your_Own_Workforce_Into_an_Attack_Surface\"><\/span>Shadow AI Turns Your Own Workforce Into an Attack Surface<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Shadow AI is employee use of AI tools that security has not sanctioned, and it is now the fastest-growing category of AI-related breach. IBM’s 2026 Cost of a Data Breach Report found shadow AI involved in 43% of AI-related incidents, more than double the 20% recorded a year earlier. Those breaches averaged $5.39 million against a global average of $4.99 million, and roughly one in five of them triggered a regulatory fine.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Governance is moving in the wrong direction while usage climbs. The same report found 68% of breached organizations had no policy to govern AI use or manage shadow AI, up from 63%. The share requiring IT approval before an AI tool is deployed fell from 45% to 38%. Among organizations that suffered an AI-related breach, 92% lacked adequate AI access controls. Attacks against the models themselves were the most expensive of all: prompt injection and model inversion incidents averaged close to $6 million.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Prohibition is not what closes this gap, because the pressure driving shadow AI is productivity and prohibition does not reduce it. What works is making the sanctioned path faster than the unsanctioned one: a named approver rather than a committee, a short request form covering the tool and the data it will touch, and a decision inside a week. A fast refusal with a suggested alternative keeps people inside the process; a slow maybe sends them outside it. Folding AI tool use into an existing <a href=\"https:\/\/threatcop.com\/blog\/cybersecurity-governance-risk-and-compliance-guide\/\">governance, risk, and compliance program<\/a> is usually faster than building a parallel one.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Why_Standard_Security_Awareness_Training_Fails_Against_AI-Powered_Attacks\"><\/span>Why Standard Security Awareness Training Fails Against AI-Powered Attacks<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The strongest evidence that conventional awareness training does not reduce phishing susceptibility comes from a randomized controlled trial, not from vendor data. Researchers from UC San Diego, UC San Diego Health, and the University of Chicago ran <a href=\"https:\/\/today.ucsd.edu\/story\/cybersecurity-training-programs-dont-prevent-employees-from-falling-for-phishing-scams\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">an eight-month study across 19,500 employees<\/a>, sending 10 phishing campaigns and presenting the results at the 46th IEEE Symposium on Security and Privacy in 2025.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The findings were blunt. There was no significant relationship between recent completion of annual mandated training and the likelihood of failing a phishing simulation. Embedded training, delivered at the moment someone clicked, reduced click likelihood by about 2%, a 1.7% difference in failure rates between trained and untrained employees. Engagement explained much of it: roughly 75% of employees spent a minute or less on the training material, and about a third closed the page without engaging at all.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One result inside the study points to what does work. Employees who actually completed the interactive question-and-answer lesson were around 19% less susceptible. The researchers themselves flagged the caveat, which is that people who voluntarily finish training may already be less susceptible, so the effect is not cleanly causal. The directional signal still holds: completed, interactive content moved a number that passive, mandatory content did not, and <a href=\"https:\/\/threatcop.com\/blog\/best-practices-for-employee-training\/\">employee training practices that survive contact with reality<\/a> are built around finishing rather than assigning.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The study’s most quietly devastating finding is about lures rather than training. Only 1.8% of employees clicked a generic lure asking them to update their Outlook password. A lure claiming to announce a change to their own organization’s vacation policy drew 30.8%. That is a 17-fold difference produced entirely by relevance, in a study that used no AI at all. What generative AI supplies attackers is the ability to make every lure the vacation policy one.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_to_Build_a_Workforce_Defense_That_Holds_Against_AI_Attacks\"><\/span>How to Build a Workforce Defense That Holds Against AI Attacks<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Defending a workforce against AI-powered attacks comes down to four changes, and none of them is a new detection skill. The table below maps each change to what it replaces and how to verify it worked.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>Change<\/th><th>What it replaces<\/th><th>How you verify it<\/th><\/tr><\/thead><tbody><tr><td>Verification protocol for money, credentials, access, and data requests<\/td><td>Asking employees to judge whether a message looks suspicious<\/td><td>Sampled audit of high-value requests showing callback on a known number<\/td><\/tr><tr><td>Multi-vector simulation covering voice, SMS, WhatsApp, and QR alongside email<\/td><td>Email-only simulation programs<\/td><td>Measured failure rates per channel, not one blended rate<\/td><\/tr><tr><td>Relevance-matched lures drawn from real internal context<\/td><td>Generic template lures reused each quarter<\/td><td>Click-rate delta between generic and contextual lures in the same population<\/td><\/tr><tr><td>Targeted training assigned from individual risk data<\/td><td>Annual all-staff completion campaigns<\/td><td>Completion depth and repeat-failure rate, not assignment count<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The verification protocol is the highest-value control and the cheapest to deploy. Write it as a rule that names channels rather than warning signs: any request involving payment, credential reset, access provisioning, or data export is confirmed on a channel the requester did not use, on a number or address held independently. Publish the callback numbers. Make the protocol mandatory for the finance, HR, IT service desk, and executive assistant roles first, because those are the roles AI-assisted pretexting targets.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Measurement has to come before training, which is the part most programs invert. <a href=\"https:\/\/threatcop.com\/blog\/how-do-phishing-simulations-contribute-to-enterprise-security\/\">What a phishing simulation actually contributes<\/a> is a baseline that names individuals and channels, and without one, training budget is allocated by assumption. This ordering is the basis of <a href=\"https:\/\/threatcop.com\/blog\/people-security-management\/\">people security management<\/a>, which treats the human layer as a security domain with its own assessment, controls, and metrics rather than a training checkbox.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/threatcop.com\/threatcop-security-awareness-training\">Threatcop Security Awareness Training<\/a> is built for that ordering. It runs simulations across multiple vectors including voice, WhatsApp, and QR codes, generates lure templates with AI so the test matches the sophistication of real attacks rather than a 2019 template, and produces an employee vulnerability score per person. Training then goes to the named individuals the score surfaces, in gamified and multilingual formats through TLMS, so the content is finished rather than clicked through. Average breach time, the interval between lure delivery and first compromise, gives a program the number click rate cannot: how fast an attacker actually wins.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Metrics_That_Show_Whether_Your_Defense_Against_AI_Attacks_Is_Working\"><\/span>Metrics That Show Whether Your Defense Against AI Attacks Is Working<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Click rate is the wrong primary metric for an AI-era program because it measures exposure to whatever lure you chose, and AI attackers do not choose the lure you chose. Five measures give a truer picture, and each of them is a number a CISO can put in a board pack.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Relevance delta.<\/strong> Click rate on a generic lure against click rate on a contextual lure in the same population. A wide gap means the standard program is understating real risk, exactly as the UC San Diego data showed.<\/li>\n\n\n\n<li><strong>Per-channel failure rate.<\/strong> Separate rates for email, voice, SMS, WhatsApp, and QR code. A blended rate hides the channels nobody has tested.<\/li>\n\n\n\n<li><strong>Time to first report.<\/strong> Minutes between the first delivery and the first employee report. This is the only metric that improves containment, because reporting is what triggers response.<\/li>\n\n\n\n<li><strong>Report-to-click ratio.<\/strong> How many people reported for every one who clicked. A rising ratio is the clearest evidence of behavior change, and building an <a href=\"https:\/\/threatcop.com\/blog\/what-is-incident-reporting-culture\/\">incident reporting culture<\/a> is what moves it.<\/li>\n\n\n\n<li><strong>Repeat failure rate.<\/strong> The share of employees failing a second or third simulation. A small persistent group usually carries most of the organizational risk and needs different treatment from the majority.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Track these quarterly rather than annually. Annual measurement cannot distinguish a program that worked from an attacker who did not try, and <a href=\"https:\/\/threatcop.com\/blog\/metrics-for-measuring-the-impact-of-security-training\/\">security training metrics tied to behavior change<\/a> only become meaningful when the interval is short enough to attribute movement to something.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"What_to_Do_Next\"><\/span>What to Do Next<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">AI-powered cyberattacks have not created a new species of threat. They have removed the cost barrier that once kept expert-quality social engineering rare, which means the average employee now faces what only executives used to face. The programs that hold up are the ones that measure exposure with lures as good as the real ones, then spend training on the people the measurement names.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Start by running one multi-vector simulation with contextual lures against a slice of your workforce, then compare it to your last generic email campaign. If the gap resembles the 17-fold difference the UC San Diego researchers measured in 2025, your baseline is understating your risk. Threatcop can set up that comparison and walk you through the employee vulnerability data it produces.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>AI-powered cyber attacks scale old methods, not new ones. See the 2026 evidence on cost, deepfakes and agentic AI, and how to defend your workforce.<\/p>\n","protected":false},"author":20,"featured_media":15292,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[424,1],"tags":[],"class_list":["post-15288","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-cybersecurity","category-people-security-insights"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AI-Powered Cyber Attacks: What Actually Changed and How to Defend Your Workforce<\/title>\n<meta name=\"description\" content=\"AI-powered cyber attacks scale old methods, not new ones. See the 2026 evidence on cost, deepfakes and agentic AI, and how to defend your workforce.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AI-Powered Cyber Attacks: What Actually Changed and How to Defend Your Workforce\" \/>\n<meta property=\"og:description\" content=\"AI-powered cyber attacks scale old methods, not new ones. See the 2026 evidence on cost, deepfakes and agentic AI, and how to defend your workforce.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/\" \/>\n<meta property=\"og:site_name\" content=\"Threatcop\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/people\/Threatcop\/100083109892339\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-11T13:58:01+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-11T13:58:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2026\/09\/Panel-Banner.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1080\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Praveen Pal Singh\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatcop\" \/>\n<meta name=\"twitter:site\" content=\"@threatcop\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Praveen Pal Singh\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"13 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/ai-powered-cyber-attacks\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/ai-powered-cyber-attacks\\\/\"},\"author\":{\"name\":\"Praveen Pal Singh\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#\\\/schema\\\/person\\\/896883f41d64c4025b4b749400e6ff11\"},\"headline\":\"AI-Powered Cyber Attacks: What Actually Changed and How to Defend Your Workforce\",\"datePublished\":\"2026-09-11T13:58:01+00:00\",\"dateModified\":\"2026-09-11T13:58:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/ai-powered-cyber-attacks\\\/\"},\"wordCount\":2615,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/ai-powered-cyber-attacks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Panel-Banner.jpg\",\"articleSection\":[\"AI & Cybersecurity\",\"People Security\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/threatcop.com\\\/blog\\\/ai-powered-cyber-attacks\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/ai-powered-cyber-attacks\\\/\",\"url\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/ai-powered-cyber-attacks\\\/\",\"name\":\"AI-Powered Cyber Attacks: What Actually Changed and How to Defend Your Workforce\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/ai-powered-cyber-attacks\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/ai-powered-cyber-attacks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Panel-Banner.jpg\",\"datePublished\":\"2026-09-11T13:58:01+00:00\",\"dateModified\":\"2026-09-11T13:58:03+00:00\",\"description\":\"AI-powered cyber attacks scale old methods, not new ones. See the 2026 evidence on cost, deepfakes and agentic AI, and how to defend your workforce.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/ai-powered-cyber-attacks\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/threatcop.com\\\/blog\\\/ai-powered-cyber-attacks\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/ai-powered-cyber-attacks\\\/#primaryimage\",\"url\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Panel-Banner.jpg\",\"contentUrl\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/Panel-Banner.jpg\",\"width\":1920,\"height\":1080,\"caption\":\"AI-Powered Cyber Attacks\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/ai-powered-cyber-attacks\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AI-Powered Cyber Attacks: What Actually Changed and How to Defend Your Workforce\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/\",\"name\":\"Threatcop\",\"description\":\"Cybersecurity Blogs, News, Updates, and Articles\",\"publisher\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#organization\",\"name\":\"Threatcop\",\"url\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/threatcop-logo-black-1.png\",\"contentUrl\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/threatcop-logo-black-1.png\",\"width\":432,\"height\":102,\"caption\":\"Threatcop\"},\"image\":{\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/people\\\/Threatcop\\\/100083109892339\\\/\",\"https:\\\/\\\/x.com\\\/threatcop\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/threatcop\\\/\",\"https:\\\/\\\/www.instagram.com\\\/threatcop_official\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/#\\\/schema\\\/person\\\/896883f41d64c4025b4b749400e6ff11\",\"name\":\"Praveen Pal Singh\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/avatar_user_20_1756127428.png\",\"url\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/avatar_user_20_1756127428.png\",\"contentUrl\":\"https:\\\/\\\/threatcop.com\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/avatar_user_20_1756127428.png\",\"caption\":\"Praveen Pal Singh\"},\"description\":\"Praveen Pal Singh is the Growth Director \u2013 North India & ASEAN at Threatcop, with experience spanning cybersecurity, business growth, and People Security Management. He works with organizations to address human-layer risks and strengthen their cybersecurity resilience. His areas of expertise include cybersecurity awareness, social engineering, phishing, email security, human risk management, and People Security Management. He is passionate about helping organizations build stronger, people-centric defenses against evolving cyber threats.\",\"sameAs\":[\"https:\\\/\\\/threatcop.com\\\/\",\"https:\\\/\\\/in.linkedin.com\\\/in\\\/praveen-pal-singh-92095a150\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AI-Powered Cyber Attacks: What Actually Changed and How to Defend Your Workforce","description":"AI-powered cyber attacks scale old methods, not new ones. See the 2026 evidence on cost, deepfakes and agentic AI, and how to defend your workforce.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/","og_locale":"en_US","og_type":"article","og_title":"AI-Powered Cyber Attacks: What Actually Changed and How to Defend Your Workforce","og_description":"AI-powered cyber attacks scale old methods, not new ones. See the 2026 evidence on cost, deepfakes and agentic AI, and how to defend your workforce.","og_url":"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/","og_site_name":"Threatcop","article_publisher":"https:\/\/www.facebook.com\/people\/Threatcop\/100083109892339\/","article_published_time":"2026-09-11T13:58:01+00:00","article_modified_time":"2026-09-11T13:58:03+00:00","og_image":[{"width":1920,"height":1080,"url":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2026\/09\/Panel-Banner.jpg","type":"image\/jpeg"}],"author":"Praveen Pal Singh","twitter_card":"summary_large_image","twitter_creator":"@threatcop","twitter_site":"@threatcop","twitter_misc":{"Written by":"Praveen Pal Singh","Est. reading time":"13 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/#article","isPartOf":{"@id":"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/"},"author":{"name":"Praveen Pal Singh","@id":"https:\/\/threatcop.com\/blog\/#\/schema\/person\/896883f41d64c4025b4b749400e6ff11"},"headline":"AI-Powered Cyber Attacks: What Actually Changed and How to Defend Your Workforce","datePublished":"2026-09-11T13:58:01+00:00","dateModified":"2026-09-11T13:58:03+00:00","mainEntityOfPage":{"@id":"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/"},"wordCount":2615,"commentCount":0,"publisher":{"@id":"https:\/\/threatcop.com\/blog\/#organization"},"image":{"@id":"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/#primaryimage"},"thumbnailUrl":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2026\/09\/Panel-Banner.jpg","articleSection":["AI & Cybersecurity","People Security"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/","url":"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/","name":"AI-Powered Cyber Attacks: What Actually Changed and How to Defend Your Workforce","isPartOf":{"@id":"https:\/\/threatcop.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/#primaryimage"},"image":{"@id":"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/#primaryimage"},"thumbnailUrl":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2026\/09\/Panel-Banner.jpg","datePublished":"2026-09-11T13:58:01+00:00","dateModified":"2026-09-11T13:58:03+00:00","description":"AI-powered cyber attacks scale old methods, not new ones. See the 2026 evidence on cost, deepfakes and agentic AI, and how to defend your workforce.","breadcrumb":{"@id":"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/#primaryimage","url":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2026\/09\/Panel-Banner.jpg","contentUrl":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2026\/09\/Panel-Banner.jpg","width":1920,"height":1080,"caption":"AI-Powered Cyber Attacks"},{"@type":"BreadcrumbList","@id":"https:\/\/threatcop.com\/blog\/ai-powered-cyber-attacks\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/threatcop.com\/blog\/"},{"@type":"ListItem","position":2,"name":"AI-Powered Cyber Attacks: What Actually Changed and How to Defend Your Workforce"}]},{"@type":"WebSite","@id":"https:\/\/threatcop.com\/blog\/#website","url":"https:\/\/threatcop.com\/blog\/","name":"Threatcop","description":"Cybersecurity Blogs, News, Updates, and Articles","publisher":{"@id":"https:\/\/threatcop.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/threatcop.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/threatcop.com\/blog\/#organization","name":"Threatcop","url":"https:\/\/threatcop.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/threatcop.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2026\/08\/threatcop-logo-black-1.png","contentUrl":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2026\/08\/threatcop-logo-black-1.png","width":432,"height":102,"caption":"Threatcop"},"image":{"@id":"https:\/\/threatcop.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/people\/Threatcop\/100083109892339\/","https:\/\/x.com\/threatcop","https:\/\/www.linkedin.com\/company\/threatcop\/","https:\/\/www.instagram.com\/threatcop_official\/"]},{"@type":"Person","@id":"https:\/\/threatcop.com\/blog\/#\/schema\/person\/896883f41d64c4025b4b749400e6ff11","name":"Praveen Pal Singh","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2025\/08\/avatar_user_20_1756127428.png","url":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2025\/08\/avatar_user_20_1756127428.png","contentUrl":"https:\/\/threatcop.com\/blog\/wp-content\/uploads\/2025\/08\/avatar_user_20_1756127428.png","caption":"Praveen Pal Singh"},"description":"Praveen Pal Singh is the Growth Director \u2013 North India & ASEAN at Threatcop, with experience spanning cybersecurity, business growth, and People Security Management. He works with organizations to address human-layer risks and strengthen their cybersecurity resilience. His areas of expertise include cybersecurity awareness, social engineering, phishing, email security, human risk management, and People Security Management. He is passionate about helping organizations build stronger, people-centric defenses against evolving cyber threats.","sameAs":["https:\/\/threatcop.com\/","https:\/\/in.linkedin.com\/in\/praveen-pal-singh-92095a150"]}]}},"_links":{"self":[{"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/posts\/15288","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/comments?post=15288"}],"version-history":[{"count":4,"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/posts\/15288\/revisions"}],"predecessor-version":[{"id":15294,"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/posts\/15288\/revisions\/15294"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/media\/15292"}],"wp:attachment":[{"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/media?parent=15288"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/categories?post=15288"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/threatcop.com\/blog\/wp-json\/wp\/v2\/tags?post=15288"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}