Leveraging humans for detection makes it hard for the attackers to predict whether or not their malicious emails will be identified and using technology to automate response provides scale and speed in resolution.

Organizations may not be able to mitigate BEC scams entirely; however, tightening up processes will ensure data exposure is kept to a minimum.

“Evasive phishing" is not a term much heard, but we all will—and need to—start talking a lot more about it than we have in the past.

We should be thinking about how users work, what they do and how it affects the security posture of the business, but does security really start with them?