Why Basic Phishing Training Doesn’t Work Anymore
Source: YouTube · Huntress · published Nov 13, 2026 · 16:42
This Huntress webinar showcases advanced simulated phishing scenarios built from real SOC data, revealing that click-to-compromise rates vary dramatically by technique 4:27.
Key Takeaways:
• Huntress is a full managed security platform (EDR over 5M endpoints, ITDR over 14M identities), with training and phishing scenarios built from real attacks by offensive-security researchers 0:40
• SAT includes animated episodes, phishing with in-the-moment defense coaching (70%+ completion, under 5 minutes), and a gamified threat simulator putting learners in the hacker's seat 2:13
• ClickFix attacks—users pasting malicious code via fake CAPTCHAs—made up 53%+ of malware loader activity and drove a 135% SOC incident spike; Huntress EDR can kill suspicious curl executions 5:16
• Device code phishing grew 1300% in H2 last year with a 77% compromise rate; Microsoft tokens persist until revoked 8:31
• Compromise rates: fake meeting clients 35%, credential harvesting 33%, ConcentraFix 25%, browser-in-browser 20%, ClickFix only 7%—ease-of-action, novelty, and familiarity drive susceptibility 11:28
• The most-clicked scenario was a mundane June vacation-policy email—relevancy is king 11:00
• Huntress is building proactive defense drills—short gamified micro-trainings with leaderboards—to expose users to emerging tradecraft before real attacks 14:28
Demos and free trials sync with Microsoft 365 within the first call 15:55.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Hey, thank you so much for
joining. My name is Dima. I'm the principal product manager
for Huntress SAT. I'm James O'Leary. I am the senior product marketing
manager for SAT as well. So we are gonna be talking about
advanced simulated phishing, and we're here to talk about the numbers.
We're not here to just give basical. Um, but first, let's set the stage and
talk a little bit about what we do, um, and what the heck do we mean by advanced
phishing and what the difference is between what you refer to as basic
versus the advanced side. So James, maybe set us up with what Hunters does. Yeah. So if you're not
familiar with Hunters, we aren't just security
awareness training. We are a full managed security platform. So we are actually managing our EDR
over five million endpoints with our ITDR …