In-Depth Look at Phishing and Cybersecurity Culture with David Shipley | Cybersecurity Today

In-Depth Look at Phishing and Cybersecurity Culture with David Shipley | Cybersecurity Today

Author: Jim Love January 31, 2026 Duration: 1:07:04

In this episode of Cybersecurity Today, host Jim Love welcomes David Shipley, CEO of Beauceron Security, as a guest. Together, they delve into the latest research from Beauceron  Security with assistance from he University of Montreal. They discuss the effectiveness of phishing simulations, the importance of reporting suspicious activities, and the psychological factors that lead to clicking on phishing emails. The episode also highlights the surprising advantages small businesses have over larger organizations in phishing defense, and how management's attitude towards cybersecurity significantly impacts a company's overall security culture. Don't miss this thorough, insightful conversation that will change how you think about cybersecurity training and culture!

Cybersecurity Today would like to thank Meter for their support in bringing you this podcast. Meter delivers a complete networking stack, wired, wireless and cellular in one integrated solution that's built for performance and scale.

You can find them at Meter.com/cst

00:00 Introduction and Sponsor Message
00:19 Meet the Guest: David Shipley
01:46 David's Research with University of Montreal
02:17 Phishing Simulation Training Insights
03:16 The Importance of Real Research
04:30 Human Risk Management vs. Security Awareness
05:49 Understanding Phishing and Its Impact
11:10 The Role of Technology and Human Resilience
14:34 Effective Phishing Training Strategies
19:02 Analyzing Click Behavior and Reporting
27:17 Why People Click: Survey Insights
36:07 High Click Rates and Psychological Safety
38:13 Management's Role in Cybersecurity Culture
39:29 Impact of Tenure and Compensation on Click Rates
40:58 The Importance of Security Awareness Programs
43:35 Feedback and Reporting in Cybersecurity
54:12 Small Companies vs. Large Companies in Cybersecurity
56:44 Surprising Findings and Future Directions
01:02:12 Conclusion and Report Availability


Every morning, Jim Love sifts through the noise of the digital world to bring you a clear, concise briefing on what actually matters. Cybersecurity Today isn't about fearmongering; it's about practical awareness. You'll hear straightforward analysis of the most recent attacks targeting companies, from sophisticated ransomware campaigns to stealthy data theft. Jim breaks down the implications of major breach disclosures, explaining not just what was stolen, but how it happened and who is affected. The focus remains on actionable intelligence-concrete steps and strategic thinking that can help protect your organization's data and infrastructure. This daily podcast serves as an essential filter for IT professionals, business leaders, and anyone responsible for digital assets, transforming complex threats into understandable insights. Tune in for a grounded perspective on navigating an online landscape where the risks are constantly evolving, and the need for clear, timely information has never been greater.
Author: Language: English Episodes: 100

Cybersecurity Today
Podcast Episodes
Cisco Breached: Source Code Stolen - Cybersecurity Today [not-audio_url] [/not-audio_url]

Duration: 15:03
Cisco Source Code Stolen in Trivy Fallout, Axios Supply Chain Attack, and Active Exploitation of Fortinet and Citrix Flaws David Shipley reports multiple major security incidents: attackers used credentials stolen in the…
Russian State Hackers Go After IoS Devices [not-audio_url] [/not-audio_url]

Duration: 19:42
Mac Malware 'Infinity Stealer,' DarkSword iOS Exploits, China Telecom Espionage & TeamTNT Supply Chain Hits Cybersecurity Today would like to thank Meter for their support in bringing you this podcast. Meter delivers a c…
Anonymous Tip System Breach May Expose Tipsters [not-audio_url] [/not-audio_url]

Duration: 11:28
Anonymous Tip System Breach Exposes Millions of Records, Google Warns Q-Day by 2029, and New AI Documentation Supply-Chain Risks Cybersecurity Today would like to thank Meter for their support in bringing you this podcas…
Startup Accused Of Helping Fake Privacy and Security Audits [not-audio_url] [/not-audio_url]

Duration: 12:41
Compliance Startup Audit-Faking Claims, Trivy Supply-Chain Backdoor, Russia Targets Signal/WhatsApp, and Iran-Linked Stryker Disruption Cybersecurity Today would like to thank Meter for their support in bringing you this…
The Fundamental Mistake in Cybersecurity Risk Management [not-audio_url] [/not-audio_url]

Duration: 49:39
Cybersecurity Isn't Managing Risk—It's Managing Threats... And That's the Problem Host David Shipley speaks with Jeff Gardiner, a former university CISO and now at Morgan Stanley, about Gardiner's doctoral research argui…
Another Medical Device Firm Hit [not-audio_url] [/not-audio_url]

Duration: 14:24
Medical Device Breaches, Anti-Scam Pledge Scrutiny, AI Font Trick, and Iran-Linked Cyber Updates. Cybersecurity Today would like to thank Meter for their support in bringing you this podcast. Meter delivers a complete ne…