Aruneesh spoke on human risk management — why security training is so often treated as a chore, and how contextual, persona-based, genuinely engaging programs change behavior instead. He argued that recognition schemes like leaderboards rarely move people, and that security participation lands better when tied to what employees actually value, such as performance reviews and extra credit, with a finance employee facing different simulated attacks than a member of the technical team.
He also spotlighted the deep fake crisis, sharing a social experiment in which 92% of non-technical staff and 42% of security professionals failed to detect AI-manipulated imagery — and made the case that awareness programs must become adaptive and intelligent to prepare users for highly sophisticated, personalized attacks. Threatcop published a recap of the talk on its blog.
Photos from this event are on the way — check back soon.