Show Notes
Phishing training for employees often uses fake emails and punishment for anyone who clicks. Craig Taylor, co-founder of CyberHoot, explains why positive reinforcement works better at helping your team spot real phishing attacks. In this episode: Craig says punishment only holds a behavior down for a while, and rewarded behaviors are the ones people repeat. When a failed phishing test leads to meetings with a boss and then HR, many employees stop trying and start to resent the IT department. Phishing emails often show four signs: urgency, emotion, authority, and secrecy. A click matters because of where your computer sits on the company network and the shared files and accounts it can reach. A password manager won't fill in your login on a fake site, and that's what kept Craig from handing over his LinkedIn password. Guest: Craig Taylor, co-founder, CyberHoot CyberHoot: https://cyberhoot.com CyberHoot blog: https://cyberhoot.com/blog/ CyberHoot for individuals (free): https://cyberhoot.com/individuals Chapters 00:00 Craig's path from psychology to security 03:29 Why punishing clicks doesn't work 10:08 What a failed phishing test does to staff 11:17 Warning signs of a phishing email 14:27 Why one click can hurt your company 21:25 When a real email looks like phishing 28:41 Password reuse and password managers 37:43 Password managers for your team 43:15 First steps to protect your business Episode page: https://webtalk.show/episodes/092-what-you-dont-know-about-your-email/ Hosted by Armando J. Perez-Carreno. Learn more at https://perezcarreno.com
More from The Web Talk Show
Two Toyota dealers 20 minutes apart buy the same car from Toyota at the same price, then fight each other for your business. Todd Katcher, CPO of Zoney Digital Signage, explains how that works and why a dealership's waiting room TV can quietly cost it the sale.
In 2018 Mark Kreitzman's phone went dead in the Arizona desert. Someone at a phone store had moved his number to another device, and in 61 minutes the attackers reset passwords on his bank, email, cloud and crypto accounts. That SIM swap is why he helped build Efani, a mobile carrier designed to stop it from happening.
Getting into companies like SpaceX or OpenAI before they go public has usually taken at least $100,000, accredited investor status and months of paperwork. Chan Ahn spent almost 20 years in investment banking before founding Tessera, which puts exposure to those private companies on the blockchain so anyone with a crypto wallet can trade it from $1.
Smart people fall for scams because criminals use urgency and our natural trust against us. Robert Siciliano of Protect Now explains how criminals pick their targets and the three basic steps that make you a much harder target. In this episode: Fewer than 1 in 10 people in Robert's live audiences use a password manager, so setting one up puts you ahead of most people. Scammers use manufactured urgency, like an AI clone of your daughter's voice, to create tunnel vision so you act before you think. Everyone has a human blind spot, a built-in default to trust, and criminals build their scams around it. Shaming employees who click a bad link keeps breaches hidden, and treating those mistakes as data helps people speak up. A credit freeze at TransUnion, Equifax, and Experian stops new account fraud, and your current credit cards keep working. Guest: Robert Siciliano, security awareness trainer, Protect Now Protect Now: https://protectnowllc.com Robert's newsletter: search for Robert Siciliano on LinkedIn Chapters 00:00 How Robert got hacked in 1995 06:38 Password managers and two-factor login 11:16 The trinity of vulnerability 17:49 Becoming a tougher target 21:49 All security is personal 26:38 Why stories make training stick 31:43 How scammers fool smart people 35:43 The human blind spot and trust 45:28 Why shaming employees hides breaches 53:13 Three basics to start today Episode page: https://webtalk.show/episodes/098-smart-people-fall-for-scams-too-heres-why/ Hosted by Armando J. Perez-Carreno. Learn more at https://perezcarreno.com
Home service contractors who do great work can still lose jobs to competitors who show up first on Google. Jonah Bautista of Atlanta Pro Network explains the free Google Business Profile settings and review habits that help contractors get into the map pack, often within 30 days. In this episode: The Google map pack is free, and you can register your business at business.google.com without knowing code or even having a website. Google now ranks businesses that stay active above ones that have just been around a long time, so reply to reviews within 24 hours (especially the negative ones). You can offer a discount or a small gift card for a review, but the FTC doesn't allow you to reward someone for leaving a positive one. Ask customers to mention the service, the tech's name, and their neighborhood in the review, because those words help your local SEO. Most contractors list 5 to 20 services on their profile when they could list as many as 300, and every missing one is a search you won't show up in. Guest: Jonah Bautista, Atlanta Pro Network Atlanta Pro Network (free audit): https://atlantapronetwork.com Chapters 00:00 From e-commerce to Atlanta contractors 04:06 How the Google map pack works 06:22 Set up your free Google Business Profile 08:11 Why activity and reviews matter now 12:41 What to ask for in a review 14:34 List every category and service 19:02 Handling missed calls on the job 25:24 Building a business you can sell 34:02 A local alternative to Angi 38:54 Where to start with an audit Episode page: https://webtalk.show/episodes/097-why-great-contractors-stay-invisible-on-google-and-the-free-fix/ Hosted by Armando J. Perez-Carreno. Learn more at https://perezcarreno.com