Attackers turned a fake Docusign signature request into a step-by-step guide for installing malware

A fake fund-recovery service targets people who already lost money to investment fraud, sent through a real email marketing platform to slip past filters.

A Google Ads on Air impersonation, where genuine branding, a real third-party mailing platform, and zero urgency combine to make a credential-harvesting page feel routine.

A fake project collaboration invite, where a calm, urgency-free pretext and a simulated live Teams meeting lull recipients into entering their Microsoft password not once, but twice.

A fake charge alert is delivered through VISA's own account-creation system, luring recipients into calling scammers to "cancel" a payment.

Security awareness has a low, narrow ceiling and a thin job market. The skills underneath it map almost exactly onto "enablement," a role the market already tracks, prices, and pays for. Here's how to rewrite your CV to reflect that, with real before/after examples.

Attackers are sending out a team lunch RSVP email featuring a genuine Microsoft sign-in link that quietly hands recipients off to a fake Google credential harvester.

The fourth piece in the Borrowed series, applying ideas from outside security to awareness practice. SaaS companies obsess over getting a new user to their first moment of value within minutes. Security teams hand a new starter a policy document and call it onboarding. This piece applies product activation thinking, the aha moment, time to value, to a new starter's first week.