The best-funded companies open the most phishing attachments

An employee gets an email dressed as a password reset. She clicks the link, types her credentials into a page built to copy her company’s login screen, and moves on with her morning. Across 13.9 million simulated phishing messages, one in ten recipients flagged the attempt to their security team.