From Madison Avenue to Malware

This article argues that attackers exploit personalization—much like 1960s direct marketing—to make spear-phishing highly effective, citing industry statistics on phishing-driven breaches and credential theft. It recommends shifting security awareness to personalized, just-in-time, adaptive training and evolving phishing simulations tailored to each employee’s role and behavior to improve real-time risk decisions.