Your home for Human Risk Intelligence insights
Fresh insights, updates, and practical tips for tackling human risk.

Binance hack: How a fake job interview led to a $6.3B theft
The Binance hack saw about $6.36 billion stolen, the largest cryptocurrency theft on record. Yet the breach began not with a technical flaw but with a fake job interview and a malicious search ad that targeted Binance engineers. This article explains how the attack unfolded, why the Binance breach is fundamentally a human risk problem, and what every organization can learn from it. Discover five practical defenses against recruitment-themed social engineering, from controlling software sources to governing internal AI tools that hold privileged access.

FTC Safeguards Rule training requirements: Building a human-ready written information security plan
The FTC Safeguards Rule requires every covered non-bank financial institution, regardless of size, to provide security awareness training that reflects the risks identified in its risk assessment. This article explains who the rule applies to, the nine elements of a written information security plan, the training obligations in 16 CFR 314.4(e), and the 30-day FTC breach notification requirement. It also outlines enforcement exposure, including consent orders and penalties of up to $53,088 per violation. With the human element present in 65% of financial services breaches, the article shows how Human Risk Intelligence helps institutions measure, reduce, and evidence human risk.

November 2026 product updates: Holiday campaigns, new training and MSP insights
Explore November's usecure updates, including holiday scam campaign resources, new security awareness courses, training improvements and MSP insights.
.png)
November 2026 release notes
Explore November's usecure updates, including smarter uPhish simulations, improved PSA workflows, breach reporting and platform enhancements.
How one MSP took training completion from 10% to 90% with uHealth
See how Rio IT increased training completion from 10% to over 90% with uHealth, plus what's next for Human Risk Intelligence and key MSP insights.
.png)
8 best human risk reporting platforms for MSPs
Compare 8 human risk reporting platforms for MSPs. Explore risk scoring, client reporting, integrations and features that go beyond training completion.
.png)
8 best security policy management platforms for MSPs and SMBs
Compare 8 security policy management platforms for MSPs and SMBs. Explore policy templates, acknowledgments, reporting and Human Risk Intelligence.
.png)
7 best dark web monitoring tools for MSPs in 2026
Compare 7 dark web monitoring tools for MSPs in 2026. Explore usecure, Kaseya, Guardz and more across features, reporting, MSP fit and key tradeoffs.

What is PHI? A guide to protected health information, HIPAA identifiers, and key exclusions
What counts as protected health information (PHI), and where do its boundaries lie? This blog explains the two-part test for identifying PHI, the 18 HIPAA identifiers, and common and overlooked examples, from medical records to appointment reminders and website tracking data. It also clarifies what is not PHI, distinguishes PHI from electronic PHI (ePHI), and explores how everyday workforce decisions can expose patient information. Learn why recognizing PHI and understanding human risk are both essential to protecting patient privacy.

.png)

