Article:
https://www.darkreading.com/endpoint-security/phishing-training-doesnt-work
This article caught my attention as I am part of an organisation that uses a phishing simulation platform and the research has provided some interesting insights that I anecdotally concur with.
What are everyone's thoughts on this article? Do phishing simulations still have a place in the modern training toolkit?