Human risk and behavioral cybersecurity in LATAM

July 28, 2026 · 6 min

Email is still the main door and the other channels add to it, they do not replace it: a map of the seven vectors and the instinct each one exploits.

July 27, 2026 · 9 min

If your program can prove people completed the training but not that risk went down, it is a checkbox. These seven signs help you confirm it yourself.

July 27, 2026 · 7 min

A social engineering technique convinces an employee to copy a command and run it themselves. Here is how ClickFix and FileFix work.

July 24, 2026 · 8 min

Banning ChatGPT does not stop the habit, it hides it. What shadow AI is, how it differs from an AI agent, and what to watch in behavior.

July 22, 2026 · 8 min

Sending the same campaign to everyone measures exposure, not change. Personalize the scenario, correct on time, and validate the result with a retest.

July 21, 2026 · 6 min

Monthly for everyone, every two weeks for finance, leadership, HR and IT support. Set frequency by role without training people to spot the drill.

July 21, 2026 · 7 min

Passing the training module after falling for a phishing email proves nothing. Only putting the person back in the same situation proves the change.

July 17, 2026 · 7 min

A new hire already has access, does not know the protocols, and wants to impress. That window lasts weeks, and attackers know it better than HR does.

July 16, 2026 · 8 min

The question that matters most is not price or template count. It is how the vendor proves that someone who failed a simulation actually changed.

July 15, 2026 · 7 min

Ninety days is enough to go from zero to a program that measures conduct. Order matters more than tooling: start with who is exposed, not with the course.

July 14, 2026 · 5 min

It no longer counts who finished the course. It measures whether the person changes how they act against a deception. That is what the framework names.

July 14, 2026 · 5 min

The decision is not which modules to buy, it is whether they talk. When the engines stay silent, the leaked credential never steers the next simulation.

July 10, 2026 · 5 min

Price per employee tells you little on its own. Here are the criteria that separate a cheap fee from a program that actually reduces human risk.

July 8, 2026 · 7 min

Reporting beats falling for it, but warning is not the same as resisting. Only retesting proves the behavior actually changed.

July 7, 2026 · 5 min

The text message reaches the personal device, outside the email perimeter. That is where the employee trusts more and the company sees less.

July 6, 2026 · 7 min

Why approval-based MFA gives in to repetition and exhaustion, and what separates a real defense from a checked box against this pattern.

July 3, 2026 · 5 min

A 2026 guide to the HRM category for companies of 25 to 500 employees in LATAM. Nine platforms compared by what really decides: how they prove change.

July 3, 2026 · 5 min

A phone attack no email filter can stop: why the help desk is the target, and how to validate that people actually resist the pretext.

July 2, 2026 · 7 min

The native Microsoft 365 simulator is a solid starting point, not a human risk program. A scope comparison and the checklist a CISO should demand.

July 2, 2026 · 5 min

A frequently asked questions bank for security leaders in LATAM evaluating a human risk management program at midsize companies.

June 30, 2026 · 5 min

Finishing a course does not prove anyone stopped falling for a scam. The metric that shows change is retesting the behavior weeks later.

June 30, 2026 · 6 min

Generative emails, synthetic voice and fake video raise the quality of deception. Why filters fall short and how to prepare your teams.

June 30, 2026 · 6 min

The market is racing to police autonomous agents, but validating how people behave under a real attack is the problem almost no one is measuring.

June 30, 2026 · 5 min

The right KnowBe4 alternative is not the one with the biggest catalog: it is the one that proves an employee who fell for a trick is no longer vulnerable.

June 27, 2026 · 5 min

A QR code hides the link and moves the attack to the phone, past your filters. Prioritize by person, simulate real quishing and validate with a retest.

June 6, 2026 · 8 min

Artificial intelligence democratized sophisticated attacks, boards woke up to human risk, and cyber insurance became a catalyst. Three converging forces that change everything.

December 28, 2025 · 6 min

A market that keeps growing while peer reviewed evidence shows that completing training does not predict fewer real failures.

December 18, 2025 · 7 min

Security spending keeps growing while the human layer stays underfunded. A look at where the imbalance comes from and how to close it.