Phishing Research Challenges Conventional Security Awareness Testing

Analysis of 2.47 million simulated phishing attacks shows organizations should measure credential leaks and reporting rates, not just click rates. The research indicates click-rate metrics alone fail to capture the full scope of phishing risk.