Phishing Training Fails: Study Exposes Minimal Impact on Employee Vulnerability
A UC San Diego study reveals traditional phishing awareness training has near-zero effect on preventing employees from clicking malicious links, with only 2% difference between trained and untrained groups. As phishing becomes the primary ransomware vector, researchers urge organizations to shift resources toward technical safeguards like MFA enforcement.