Kahneman, ‘Where’s Waldo’ and the Nexus pass: A CISO’s mental model for the AI era

Security awareness training as a defense against phishing is dead. The industry never held a funeral because the training budget is comfortable, the compliance box gets checked and no CISO wants to tell the board that the program everyone funds does not work. With enough education, users would learn to spot the tells.