resource

external

video

Phishing

Phish of the Week

Threat Studies

Security Awareness Training

Storytelling

Programme

Gamification

Metrics

Workshop

Cybersecurity Awareness Month

Data

Narrative

Content

Jobs

Opportunities

New Starters

Onboarding

Careers

SCH Academy: Security Champions

Podcasts 

Measuring Effectiveness and Metrics

Every time I mention password managers on a webinar, someone asks if they can be hacked. The honest answer is yes, but a breach has to be weighed against what most people do now: reused passwords, notes apps and spreadsheets. This post covers what the LastPass breach actually exposed, why a decent password manager still breaks the chain, the real risks worth naming, and the bigger challenge of shifting a gut feeling. It ends with an open question to the community on what’s working for you.

Can a Password Manager Be Hacked? And How Do We Talk About It?

Sarah Janes from Layer 8 joined the Secure Culture Hub to share how appreciative inquiry, low-friction tasks, and reward without gamification can turn a champions network into your biggest asset during Cybersecurity Awareness Month.

Maximising Security Champions During Cybersecurity Awareness Month

Free Cybersecurity Month toolkits, for when you can't build it all

Oli Inkley started on the Waitrose shop floor. Four and a half years later, he's starting a new adventure in security awareness and culture at Marks and Spencer.

In this episode, Oli talks about how he went from managing retail teams and night shifts to 

 Oli Inkley: From Shop Floor to Security Culture | The Awareness Practitioners

A dashboard full of metrics is not a story. This video covers how to take what your data is telling you and turn it into a narrative that explains where your programme has been, where it's going, and what needs to happen next. The difference between a programme that gets funded and one that gets forgotten often comes down to how well you tell that story.

Turning Data into a Programme Narrative

This is a classic from 2015.  From Jimmy Kimmel Live, they sent a camera out onto Hollywood Boulevard to help people by asking them to tell us their password.  

Jimmy Kimmel's What is Your Password?

Using real breach stories in security training works... but only if you do it ethically.

In this episode, we unpack ethical security storytelling: how awareness teams can use real cyber incidents to drive behavior change without crossing into fear-monger

The Ethical Guide to Security Storytelling: Navigating Real Breaches with Care and Respect

Champion Programs

Password

The first instalment in the Metrics & Measurement pillar. We look at why completion rates and click rates alone won't tell you whether your programme is working, what to measure instead, and how to start building a measurement approach that connects what you do to what actually changes.

A fake fund-recovery service targets people who already lost money to investment fraud, sent through a real email marketing platform to slip past filters.

 Phish of the Week 31st of August

When a job offer feels too good to be true, it usually is.

Recruitment Phishing

How attackers misuse legitimate third-party services to deliver callback phishing, why it's hard to catch, and how to harden your services against it.

Callback Phishing

A fake Zoom meeting that plays join sounds and shows participants arriving, then prompts an "update" that installs ScreenConnect remote access software on the recipient's device.

Phish of the Week 26th of October

An HR impersonation campaign where a supposed list of laid-off staff hides a Google short link to a Microsoft credential harvester.

Phish of the Week 19th of October

A fake Google AI recruitment campaign, where real Zoom infrastructure and a real recruiter’s name make a request for personal and ad account details look like a routine interview booking.

Phish of the Week 12th of October

Fake notifications and offers seen in 2026, targeting personal and business accounts

How phishing emails impersonate social media platforms

A Tesco Clubcard points expiry attack, where a convincing redemption flow and a small delivery fee make handing over card details feel routine.

Phish of the Week 05th of October

A real American Express order confirmation carrying a fake PayPal charge and an attacker-controlled phone number.

Phish of the Week 28th of September

A fake court summons attack threatens legal enforcement action to rush recipients into a Microsoft credential harvester.

Phish of the Week 21st of September

A fake annual performance review, where a QR code hidden inside a PowerPoint attachment quietly bypasses email link scanning to steal Microsoft credentials.

Phish of the Week 14th of September

Attackers turned a fake Docusign signature request into a step-by-step guide for installing malware

Phish of the Week 07th of September

SCHA: Security Champions

SCHA: Measuring Effectiveness and Metrics

Home

Community

Events

Courses

Collections

People

Contributors

Albums

Clubs

Chat

Channels

Tools

Help

The home for security awareness professionals. Practical content and tools built around the job. From your first programme to your most complex challenges.

Secure Culture Hub

Your Privacy Choices

It looks like there is no account associated with the email you provided. The event is for members only. Please complete the application to join our community first.

Thank you for your interest in joining us

Thanks for your interest in joining the event. However, your account is still pending. Once it's approved, you'll be able to register for the event. Please contact us via help@secureculture.com if you need support.

Pending Approval

Login to the Secure Culture Hub community to connect with others, attend community events, and more!

Login or Sign Up for even more

To unlock all parts of the community and get the best experience, complete your profile.

Hey, complete your profile

It looks like there is no account associated with the email you provided. Please complete the application to join our community.

Thank you for your interest in joining Secure Culture Hub.

Thanks for your interest in joining Secure Culture Hub. We will review your request shortly and email you once it's approved. Meanwhile, please feel free to contact us via help@secureculture.com for any questions.

Featured