Cyber Dexterity

07/10/2026

Your employees have completed the same annual training. But would they know what to do if Mr X called?

Every decision made in OUTSMARTED (our virtual cyber escape room), tells a story.

As players hunt Mr X across three rooms, the experience quietly reveals how they act under pressure:
- How they would spot a phishing email by having to build one.
- How would the threat actor convince you to bypass your business processes?
- Can they tell if what they are engaging with is a deepfake based on the behaviours they encounter?
- Do they spot the real threats?

A completion certificate shows that someone has finished the training. Telemetry tells you how they behave.

Together, they provide a behavioural picture of your organisation's cyber posture. This shows where your human risk sits, which threats your teams are most vulnerable to and where targeted support would be most effective.

That's the power of learning through gameplay. Your employees enjoy learning and are engaged, and you gain insights that no tick-box course could provide.

Did you miss the trailer? Check out the link in the comments below!

Would your team make it out? Would you like to see what your organisation's data would reveal?

Let's engage!

02/10/2026

Over the past two weeks, we have delivered six sessions of our Phishing 101 Masterclass, reaching over 2,700 people.

Every phishing email that reaches an employee has already bypassed the firewall and email filter. Whether or not an employee falls for the email then depends on them as an individual. Attackers design these messages to exploit our instinct to trust and be helpful.

Our masterclasses focus on the latest tactics employed by threat actors and the psychology behind clicking. Participants learn how these attacks are engineered and how to recognise them instinctively. They also learn that reporting a mistake quickly can help to protect the organisation.

This approach is backed up by research. Verizon's 2025 Data Breach Investigations Report found that employees who had received training within the previous 30 days were, on average, four times more likely to report phishing emails than those who had not.

Trained individuals are one of the strongest defences an organisation can have, and we are proud to have equipped over 2,700 more of them.

Want to find out more? Email us at [email protected].

29/09/2026

Our Cyber Escape Room experience is here!

A breach has been confirmed, time is running out, and Mr X is looking to compromise the organisation. Can your team catch him before he causes any damage?

Introducing OUTSMARTED, our virtual cyber escape room experience.

Just like in a real escape room, players must search for clues, solve puzzles and unlock one room after another. Here, though, every puzzle provides valuable learning opportunities. Spread across three rooms, players become forensic investigators, exposing a phishing scheme, tracing an inside breach and facing live AI deepfake calls, all before Mr X can escape with his plan.

Escape the room and you will have learned to outsmart the attacker.

No slide decks. No boring tick-box training. Just the thrill of an escape room and security lessons that make learning stick.

Watch the trailer. Would your team make it out?

Interested in making this available to your employees? Let’s engage.

Deepfakes

29/09/2026

Our Cyber Escape Room experience is here!

A breach has been confirmed, time is running out, and Mr X is looking to compromise the organisation. Can your team catch him before he causes any damage?

Introducing OUTSMARTED, our virtual cyber escape room experience.

Just like in a real escape room, players must search for clues, solve puzzles and unlock one room after another. Here, though, every puzzle provides valuable learning opportunities. Spread across three rooms, players become forensic investigators, exposing a phishing scheme, tracing an inside breach and facing live AI deepfake calls, all before Mr X can escape with his plan.

Escape the room and you will have learned to outsmart the attacker.

No slide decks. No boring tick-box training. Just the thrill of an escape room and security lessons that make learning stick.

Watch the trailer. Would your team make it out?

Interested in making this available to your employees? Let's engage.

28/09/2026

Most companies only run cybersecurity training once or twice a year just to fulfil compliance requirements. The problem? What people learn doesn't stick.

Back in 1885, psychologist Hermann Ebbinghaus discovered something that still holds true today: new information fades quickly, usually within days, unless it is revisited. Over a century later, a 2015 study found almost the same pattern. The science hasn't changed. Yet most training schedules still ignore this fact completely.

Now add AI into the mix. Phishing scams are becoming smarter and more personalised at an ever-increasing rate, faster than most training programmes can keep up with. By the time June comes around, the training from March will already have been forgotten, and the tricks it warned about may be outdated too.

The solution isn't to make training sessions longer. It's shorter, more frequent sessions that actually make you practise what you've learned, rather than just sitting through a slideshow once a year.

In her latest article, Taryn-Lee Potgieter breaks down the research and science behind this, and explains what organisations should actually be doing instead.

Read it here: https://cyberdexterity.com/articles/the-six-week-amnesia-problem/

How often is your team actually trained: once a year or all year round?

“Education is what survives when what has been learned has been forgotten.” B. F. Skinner 

21/09/2026

Have you ever wondered why you stopped paying attention to the brightly coloured 'Warning!' banner on company emails weeks ago? The one that says 'This email originated from outside your organisation.'

Now it just blends into the screen, much like the colour of your favourite aunt's wallpaper, which you can no longer quite recall.

This isn't a lapse in concentration or a trick of the mind. It's your brain doing exactly what it evolved to do: conserve energy for the events that matter most.

We call this the 'wallpaper effect': our term for the well-documented psychological and neurological process of habituation. It causes us to stop noticing warnings designed to protect us from phishing and other cyber threats.

It could be silently preventing you from spotting the one phishing email about to slip through the net.

Read our latest article by Basil Polydorou to find out why forgetting isn't your fault and how to interrupt the process before it costs you.

Link in comments.

20/08/2026

Everyone's "doing AI" right now. But fewer are ready for it.

Licences have been bought. Pilots have been launched. Copilots have been switched on. But that's activity, not strategy...the two are constantly mistaken for each other.

Here's the giveaway: AI initiatives with no link to business outcomes. Governance is bolted on after the event instead of being built in. Privacy and security are treated as a box to tick rather than a design choice. People are expected to use new tools without any change to the way decisions are made.

None of that constitutes transformation. It's just activity with better branding.

The real question isn't "How much AI are we using?" It's "What value is it actually creating? What risk is it introducing? And can our organisation handle it responsibly at scale?"

We have developed a free AI Readiness Assessment to address these issues. If you want to know where you actually stand, rather than where your licence count says you stand, get in touch at [email protected].

14/08/2026

In partnership with First Technology Group, Cyber Dexterity was represented at the Deloitte Technology Day. At a time when cyber security risks are so high, we were proud to showcase our flagship Hack-to-Protect (HTP) platform.

All too often, we see companies treating cyber training as a mere compliance exercise, with employees feeling like they just need to get it out of the way. There is little realisation of the impact on both the business and the employees' ability to be more resilient and aware of the actions of cyber criminals.

Our gamified learning experiences foster a deeper understanding of the tactics used by cybercriminals, enhancing training already implemented by many organisations.

Our objective for the day was to demonstrate that blended learning is far more effective than self-paced learning on stock content alone. Our specialisation in the cyberpsychology behind attacks was key here, as it highlights that behavioural shifts, not just awareness, drive change.


technology.africa

06/08/2026

Almost everyone knows the rules about phishing. So why do even highly trained individuals still act on seemingly credible calls at exactly the wrong moment? The next episode of The Framing Effect explores the gap between understanding a policy and being able to act on it when it matters.
(Antonios Christodoulou) and (Basil Polydorou) analyse the MGM hack to reveal what most training programmes overlook. The breach didn’t begin with sophisticated malware. It began with a conversation: a convincing call that used trust, urgency, and familiarity to override good judgement in seconds.
That’s the real lesson. Knowing the rule is not the same as keeping your cool when it’s put to the test, and you won’t close that gap by simply repeating the policy.
This is where our cyberpsychology approach comes in. We train people to pause before acting on trust, urgency and familiarity, thereby building the instinct to resist the attacker’s work.
Podcast

06/08/2026

Almost everyone knows the rules about phishing. So why do even highly trained individuals still act on seemingly credible calls at exactly the wrong moment? The next episode of The Framing Effect explores the gap between understanding a policy and being able to act on it when it matters.

Antonios (Tony) Christodoulou and Basil Polydorou analyse the MGM hack to reveal what most training programmes overlook. The breach didn't begin with sophisticated malware. It began with a conversation: a convincing call that used trust, urgency, and familiarity to override good judgement in seconds.

That's the real lesson. Knowing the rule is not the same as keeping your cool when it's put to the test, and you won't close that gap by simply repeating the policy.

This is where our cyberpsychology approach comes in. We train people to pause before acting on trust, urgency and familiarity, thereby building the instinct to resist the attacker's work.