Security Awareness Training is Broken

Today I discovered a notable security awareness training company can no longer provide vishing services because the Terms of Use of Telecoms don't differentiate between testing and malicious activity. Maybe this was an overreaction on their part, but I think this is a growing issue.

The MGM hack and the advent of cheap deepfakes should wake us up as a community: security awareness training is woefully inadequate. We need simulated training far beyond sticking tracker links/PDFs in emails and spraying …

awareness awareness training cybersecurity deepfakes don hack issue malicious mgm mgm hack security security awareness security awareness training services telecoms terms testing today training vishing