Sometimes I wonder whether all this “security awareness training” has any effect at all.

  • cron@feddit.orgOP
    link
    fedilink
    arrow-up
    5
    ·
    2 days ago

    There is a 2025 study that was widely reported:

    In summary, our results confirm the ineffectiveness of current phishing training approaches while offering a refined study design for future work.

    arXiv:2506.19899

    • nymnympseudonym@piefed.social
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 days ago

      training interventions showed no significant main effects on click rates (p=0.450) or reporting rates (p=0.417), with negligible effect sizes

      Thank you. I stand corrected, and with my Bayesian priors updated.