As cyberattacks grow more sophisticated and AI-driven threats accelerate, one vulnerability continues to appear in nearly every breach: people.
From clicking on convincing phishing emails to unknowingly sharing credentials on spoofed websites, human behaviour remains one of the biggest weaknesses in any cybersecurity strategy. And with the arrival of generative AI, deepfakes, and fraud-as-a-service platforms, the stakes have never been higher.
At Decoded, we believe the future of cyber resilience lies not only in better technology, but in better training.
The cyber threat landscape is evolving fast. Last year, phishing attacks in the UK increased by 24%, while deepfake-related fraud surged by more than 300% compared to the previous year. [1]
At the same time, the human element continues to be a critical vulnerability. According to Mimecast’s State of Human Risk 2025 report, 95% of cybersecurity breaches involve human error. [2] This stark figure reinforces the need to invest in behavioural training, not just technical defences, because even the most advanced systems can be undermined by a single click.
AI is enabling cybercriminals to:
– Automate convincing phishing content and scam websites-
– Clone voices and identities to bypass verification
– Create hyper-personalised attacks using scraped data and leaked credentials
To demonstrate just how real and accessible these threats have become, Decoded showed the real-time creation of an AI-generated voice clone during a keynote for Mastercard in Australia earlier this year. The simulation of a phishing scam revealed just how convincingly these tools can be used to manipulate and exploit. The impact was immediate and powerful, underscoring how real and accessible these threats have become.
The rise in cyberattacks is not only influencing how organisations defend themselves, it’s reshaping how they hire and train their people.
According to a recent survey of US technology executives, 64% now cite cyberattacks such as data breaches and ransomware as the greatest threat to their business over the next ten years. This recognition is prompting real change, with employers actively prioritising cybersecurity skills when recruiting.
As threats become more sophisticated, companies are recognising that a resilient workforce is just as important as technical safeguards. The demand for situational cyber awareness, not just theoretical knowledge, is now driving investment in training that builds decision-making, adaptability, and confidence under pressure.
The problem isn’t just the attacks themselves, it’s the ease with which they can be executed. In a recent Decoded presentation in Miami, we explored the ecosystem of the Dark Web, revealing how readily available the tools, services, and data needed to launch an attack have become.
From phishing kits and deepfake generators to pre-verified stolen credentials, every component of a sophisticated scam is now just a few clicks away. It’s this growing accessibility that makes training staff to recognise and respond to threats more important than ever.
Traditional cybersecurity training isn’t enough. Annual tick-box videos don’t prepare employees to act under pressure when faced with realistic threats.
According to research by Keepnet Labs, companies that run ongoing security awareness training see a 70% reduction in user-related security incidents. [4]
At Decoded, we go beyond awareness. We give teams the experience and decision-making skills they need to act fast, ask the right questions, and stop attacks before they spread.
Decoded’s Digital Fraud Bootcamp is designed to meet this challenge head-on. Delivered through five hands-on workshops, the programme places learners inside the mind of a fraudster, exploring how attacks are planned, deployed, and monetised.
Key elements include:
Live Attack Simulations
Real-time phishing and ransomware exercises that test awareness and response under pressure.
Data Breach Analysis
Deep dives into leaked data dumps and credential abuse to understand how stolen information is exploited.
Dark Web Walkthrough
A guided exploration of criminal marketplaces to expose the ecosystem behind modern cybercrime.
Behavioural Psychology of Scams
Insights into the psychological triggers that cause people to click, share, and trust the wrong things
Participants don’t just learn what fraud looks like, they experience how it works, building instinct and judgement in the process.
Cybersecurity is no longer just a technology issue. It’s a people issue, and people need the tools, understanding, and confidence to respond.
Through storytelling, simulation, and real-world demonstrations, Decoded is helping organisations build a new kind of human firewall: one grounded in curiosity, clarity, and resilience.
If you’d like to learn more about how Decoded’s fraud and cybersecurity training can support your organisation, get in touch.
Sources:
[1] UK Finance & Europol
[2] Mimecast, State of Human Risk Report 2025
[3] Per Scholas/Talker Research, Cyberattacks Reshaping Hiring Priorities (June 2025)
[4] Keepnet Labs, “Security Awareness Training Leads to 70% Incident Reduction” (Feb 14, 2025
If you’d like to learn more about Decoded and how we can help transform your
organisation, we’d love to hear from you.
