Why Punishing Employees on Phishing Tests Doesn't Work | Craig Taylor, CEO and Co-Founder, CyberHoot

05/09/2025 43 min
Why Punishing Employees on Phishing Tests Doesn't Work | Craig Taylor, CEO and Co-Founder, CyberHoot

Listen "Why Punishing Employees on Phishing Tests Doesn't Work | Craig Taylor, CEO and Co-Founder, CyberHoot"

Episode Synopsis

Craig Taylor, Founder and CEO of CyberHoot, joins us to explain why traditional phishing tests that punish employees are fundamentally broken. Drawing from his decades-long cybersecurity career, Craig shares the story of a $24,000 gift card scam that inspired him to build CyberHoot - a platform that rewards good security behaviors instead of punishing mistakes. He breaks down why engagement drops when people fail phishing tests, how hackers exploit new employees' eagerness to please, and why teaching cyber literacy in schools could give countries a strategic advantage.0:00 The $24,000 gift card scam that inspired CyberHoot12:34 The problem with "gotcha" phishing tests and the punishment mindset23:09 Browser-based breaches and the weakness of browser AI agents30:26 Why cyber literacy should be taught in schools41:00 Closing thoughts, the parallels between endurance cycling and cyber resilience🔔 Follow Craig and John on:https://www.linkedin.com/in/craigmtaylor/https://www.linkedin.com/in/johncarse/🔥 Powered by SquareXDeployed as a lightweight extension, SquareX turns any browser, on any device, into a secure enterprise browser. Find out more about SquareX at https://hubs.la/Q03rPcbf0

More episodes of the podcast Be Fearless Podcast by SquareX