Hoxhunt
Adaptive phishing simulations and micro-training, with a focus on reporting.
Security Awareness
Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
Addresses 333 stories in our coverage in the last 90 days 4 products that provide it
What it is
Short, regular training on current threats and simulated phishing that teach staff to spot and report suspicious messages, with reporting for management.
How to value it
Technology filters most attacks, but the ones that get through land with people. Frequent, relevant training turns staff into an early warning system: one quick report of a phishing email lets the security team protect everyone else. NIS2 also requires cybersecurity training for management bodies.
Questions to ask a vendor
- 1Is the content updated with current, real threats rather than generic modules?
- 2Do we measure how many people report, not just how many click?
- 3Is there training for executives and other high-risk roles?
- 4Can results serve as evidence for NIS2, DORA or ISO 27001?
For your risk register
- Risk
- Staff fall for phishing, fraud or social engineering.
- Control
- Monthly awareness training and phishing simulations with reporting metrics.
- Owner
- CISO together with HR.
- Measure
- Phishing report rate.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Huntress Managed Security Awareness Training
Security awareness training and phishing simulation, managed for you.
KnowBe4 Security Awareness Training
Training library and simulated phishing with reporting.
SoSafe Awareness Platform
Behaviour-based awareness training and phishing simulation in many languages.
Recent stories it addresses
1035 stories in total- 13 Nov 2026Stolen webcam clips of 900+ victims feed North Korea’s $400 million fake Zoom scheme
North Korean hackers stole $400M+ using fake Zoom calls with victim webcam footage.
- 13 Nov 2026How attackers turned a Teams meeting booking into a device code phishing trap
Attackers used a fake Teams scheduler to trick an employee into approving a device code sign-in.
- 13 Nov 2026Macfinger ClickFix campaign sends DownTheDRAIN infostealer for macOS, (Fri, Nov 13th)
Macfinger ClickFix campaign distributes DownTheDRAIN infostealer for macOS.
- 13 Nov 2026US seizes North Korean hacking infrastructure, $1.2 billion in cryptocurrency stolen from Binance
US seizes North Korean hacking infrastructure and over $1.2B in crypto stolen from Binance.
- 12 Nov 2026Fake Zillow pages use ClickFix NetSupport RAT to target apartment hunters
ClickFix campaign uses fake Zillow pages to install NetSupport RAT on Windows computers.
- 12 Nov 2026186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers
186 fake AI domains redirect users to malware, search hijackers, and click-lures.
- 11 Nov 2026How to Audit Browser Extensions for Supply-Chain Risk
Browser extensions pose supply-chain risks due to silent updates and potential ownership changes.
- 10 Nov 2026Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America
Blind Eagle uses fake court notices to deliver RATs across Latin America.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.