Cybersecurity training programs don’t prevent employees from falling for phishing scams
Reports and Proceedings
Updates every hour. Last Updated: 2-Jan-2026 08:11 ET (2-Jan-2026 13:11 GMT/UTC)
Cybersecurity training programs as implemented today by most large companies do little to reduce the risk that employees will fall for phishing scams–the practice of sending malicious emails posing as legitimate to get victims to share personal information, such as their social security numbers.
That’s the conclusion of a study evaluating the effectiveness of two different types of cybersecurity training during an eight-month, randomized controlled experiment. The experiment involved 10 different phishing email campaigns developed by the research team and sent to more than 19,500 employees at UC San Diego Health.
Several genetic variants associated with social behavior in honey bees are located within genes that have previously been linked to social behavior in humans, Ian Traniello at the University of Illinois at Urbana-Champaign, USA, and colleagues report on September 16th in the open-access journal PLOS Biology. The results hint at ancient roots to social behavior that have been conserved across species.
Why are some work teams happier and more productive than others? Because their members agree to interact in ways that promote well-being in themselves and others, says James Ritchie-Dunham, clinical associate professor of strategy at Texas McCombs.
Ritchie-Dunham is co-lead of the Leadership for Flourishing project, an ongoing study of well-being in the workplace across 59 countries, and a lead author for the Global Flourishing Study, an interdisciplinary, five-year initiative to survey over 200,000 people across 22 countries and 1 territory on six continents. The study is now gathering a third wave of data. Nature Portfolio published dozens of papers on the first wave in April.
Based on the first two data sets, Ritchie-Dunham discusses what flourishing looks like on the job and what managers can do to foster it.