Phishing just got personal

Espria cyber security graphic featuring the headline "Phishing Has Changed. Could Your Team Spot It?" alongside an image of a person using a laptop while holding a payment card, illustrating the growing risk of phishing and payment fraud.

Estimated reading time: 3 minutes

By Richard Puckey, Espria Head of Compliance and Facilities

AI-generated phishing attacks have surged sharply through 2026, and polymorphic AI-generated content is driving a marked increase in phishing emails that get past email gateways, because it no longer follows the repetitive patterns that signature-based filters were built to catch.

Boards are responding by treating human behaviour as a distinct, measurable risk category in its own right: Human Risk Management, sitting alongside technical controls rather than beneath them.

Your technology can block thousands of threats, but it only takes one convincing message to get through.

Espria SecureLearn helps employees spot phishing, report it quickly and stop human error becoming a security incident. Built on KnowBe4 and fully managed by Espria, it replaces annual, tick-box training with a continuous programme of role-based learning, adaptive phishing simulations and targeted coaching.

Do your IT and compliance teams have the time to run phishing simulations, analyse results and report on your organisation’s human risk position?

SecureLearn does the heavy lifting for you. Fully managed by Espria, it provides clear visibility of how employees respond to phishing threats, including how many people interact with simulated attacks, how many report them and how quickly, whether performance improves over time, where risk is concentrated, and whether targeted coaching reduces repeat mistakes.

Quarterly, board-ready reporting turns this data into meaningful insight, helping you focus effort where it will have the greatest impact and providing evidence of improvement over time.

Are you ready to understand and reduce your human cyber risk? Talk to Espria about SecureLearn today and arrange a demo to see the benefits.

Leave a Comment

You must be logged in to post a comment.

What’s in this article

    You may be interested in

    Espria-branded graphic promoting sustainable printing practices. The design features the headline "The Hidden Environmental Cost of Office Printing" alongside an image of a desktop printer producing a colour-printed business report with charts and graphs.

    The Hidden Environmental Cost of Office Printing

    Most offices know that reducing paper is good for the environment, but few have visibility over what their printing actually costs in resources: energy, paper, and consumables. A managed print service brings sustainable office printing into focus by measuring what is actually happening, rather than estimating it. Every printer left on standby overnight, every unnecessary colour print, and every cartridge thrown away with usable toner left inside adds up. For a business printing several thousand pages a month, the difference between an efficient and inefficient setup can be significant, both in cost and in environmental…

    Read the article

    Office printer connected to a business network, highlighting the cybersecurity risks of unsecured printers and potential access points for cybercriminals.

    Is Your Office Printer a Way In for Cybercriminals?

    Most small businesses think of cyber security as a laptop problem, a server problem, or an email problem. The office printer rarely gets a mention, yet it is connected to your network, holds a hard drive, and processes some of the most sensitive documents in the business, from invoices to HR letters and client contracts. However, it is important to realise that office printer vulnerabilities can be exploited by cybercriminals, potentially leading to cyber attacks. A modern multifunction printer is a computer. It has an operating system, a network connection, often Wi-Fi, and increasingly a…

    Read the article

    cyber resilience act

    The Cyber Resilience Act: what it means for your business

    By Stephen Cook From 11th September 2026, a new EU regulation starts changing how connected products and software are built, sold and supported – and UK businesses trading into Europe are firmly in scope [1] [2]. Here is what the Cyber Resilience Act actually requires, why it matters beyond the compliance paperwork, and how Espria helps clients meet it.  What is the Cyber Resilience Act?  The Cyber Resilience Act (CRA) is an EU regulation – Regulation (EU) 2024/2847 – that sets mandatory cybersecurity requirements for “products with digital elements.” In practice, this covers hardware and software that can connect to a device or network: IoT devices,…

    Read the article

    The Hidden Costs of Printing: How Managed Print Services Reduce Business Waste

    Introduction For many organisations, printing is viewed as a routine operational expense. Printers are purchased, toner is replaced when needed, and documents continue to flow through the business without much scrutiny. However, the true cost of printing extends far beyond paper and ink. Unmanaged print environments often create hidden expenses through inefficient device usage, excessive energy consumption, IT support demands, security risks, and employee downtime. These costs can accumulate significantly over time, impacting productivity and profitability. This is particularly relevant as businesses seek to optimise operations, reduce waste, and improve sustainability while controlling expenditure. Whether…

    Read the article

    Can Your Business Actually Recover? The Operational Resilience Question Most SMEs Cannot Answer

    Operational resilience is not a technology problem. It is a business problem. And until boards and leadership teams own it, no amount of IT investment will be enough. The Gap Between Confidence and Reality Most organisations believe they are more resilient than they are. The backups are running. The antivirus is licensed. The IT team knows what they are doing. That confidence, in our experience, rarely survives first contact with an actual incident. The question is not whether your systems are protected. The question is whether your business can keep delivering its most important services…

    Read the article

    Integration of Sophos and Microsoft for enhanced threat intelligence

    Why the Sophos–Microsoft Partnership Matters – Especially for Education, Financial Services and Legal Organisations

    For most organisations today, Microsoft is the foundation of how you operate and on top of this there is also a requirement for regulatory compliance and operational resilience. Whether it’s Microsoft 365 for collaboration, Teams for communication, or Azure for infrastructure, these platforms sit at the heart of day-to-day business. But for sectors like Education, Financial Services, and Legal, that reliance comes with heightened risk, and responsibility. These organisations are not only prime targets for cyber attackers, they are also subject to strict regulatory, data protection and governance obligations. That’s why the partnership between Sophos…

    Read the article