

Why Punishing Employees on Phishing Tests Doesn't Work | Craig Taylor, CEO and Co-Founder, CyberHoot
Craig Taylor, Founder and CEO of CyberHoot, joins us to explain why traditional phishing tests that punish employees are fundamentally broken. Drawing from his decades-long cybersecurity career, Craig shares the story of a $24,000 gift card scam that inspired him to build CyberHoot - a platform that rewards good security behaviors instead of punishing mistakes. He breaks down why engagement drops when people fail phishing tests, how hackers exploit new employees' eagerness to please, and why teaching cyber literacy in schools could give countries a strategic advantage.
0:00 The $24,000 gift card scam that inspired CyberHoot
12:34 The problem with "gotcha" phishing tests and the punishment mindset
23:09 Browser-based breaches and the weakness of browser AI agents
30:26 Why cyber literacy should be taught in schools
41:00 Closing thoughts, the parallels between endurance cycling and cyber resilience
🔔 Follow Craig and John on:
https://www.linkedin.com/in/craigmtaylor/
https://www.linkedin.com/in/johncarse/
🔥 Powered by SquareX
Deployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0