@XenoPhage
@april
That's odd. I haven't been on the IT/cybersecurity career path for over a decade now, but as a user with SOME background in the field, I thought the phishing tests at my company have been very good outreach to users about taking security threats seriously.
I'm guessing our disagreement stems from a difference in perspective, so I'm curious to hear more about your thoughts on the practice.
I do know that a couple of my phishing attempt reports have gotten exasperated "This is official communication from our company..." in response, to which my obvious retort is "Then why does our official communication look so much like phishing?"
=> More informations about this toot | View the thread | More toots from squeakyears@meow.social
=> View XenoPhage@infosec.exchange profile | View april@macaw.social profile
text/geminiThis content has been proxied by September (ba2dc).