Attackers use OAuth device code phishing to bypass passwords and MFA. This post explains how the attack works, why it hurts, and how people can stop it.

Attackers use OAuth device code phishing to bypass passwords and MFA. This post explains how the attack works, why it hurts, and how people can stop it.

For the seventh year in a row, NordPass presents its list of the top 200 most common passwords. Discover how common password trends differ across generations of users.

As we look forward to 2026, we have collected a wide range of predictions on topics ranging from cyber leadership to how AI will change over the coming year.

Toxic risk combinations reveal where human behaviors overlap to amplify exposure, showing security teams exactly where focused remediation delivers the greatest reduction in real-world risk.

Human risk varies across roles and behaviors. Cohort-based analysis exposes hidden risk patterns, enabling targeted interventions that reduce exposure more effectively than aggregate metrics alone.

Targeted cybersecurity interventions dramatically outperform generic ones. By tailoring them to individual risk and context, organizations see major engagement gains—what we call “targeting lift.” Ear...

We introduce our human risk campaign maturity curve—showing how organizations progress from broad awareness to deeply integrated, behavior-shaping interventions.