Positive Phish Testing, Cyber Literacy & Human-Centric Security - Craig Taylor | Ep 389
The Iferia Techcast · Oct 23, 2026 · 30:27
The Iferia Techcast · Oct 23, 2026 · 30:27
Listen in the Podli app 🎧
Follow your favourite podcasts, listen offline and in the car with CarPlay and Android Auto, and always pick up where you left off. Free to try.
Ezekiel Iferia sitsdown with 30-year cybersecurity veteran, CISSP, and co-founder of CyberHoot,Craig Taylor, to discuss why conventional cybersecurity awareness programsfail, how punitive "gotcha" phishing simulations destroy employeetrust, and how positive reinforcement changes human behavior in digitaldefense.
Having led enterprisesecurity across web hosting, financial giants like JPMorgan Chase, and globalmanufacturing at Vistaprint—and now serving as a virtual CISO (vCISO) to morethan 40 companies—Craig challenges outdated security practices. He breaks downwhy NIST revised its 90-day password change recommendations, how AI-generatedspear phishing has rendered typo-hunting obsolete, why modern session tokentheft bypasses multi-factor authentication (MFA), and how gamified, open-booktraining transforms employees into proactive human firewalls.
In this episode, you’lldiscover:
Connect with Craig Taylor &CyberHoot:
Chapter Timestamps
00:00 Welcome CraigTaylor: 30-Year Cybersecurity Veteran & Co-Founder of CyberHoot
01:46 The Evolution ofSecurity: From Firewalls to the Human in the Chair
03:04 Cybersecurity asan Immature Discipline: Lessons from Law and Medicine
05:15 Deconstructingthe NIST Password Mistake: The Danger of 90-Day Forced Rotations
06:51 Modern Password Hygiene:15-Character Passphrases, MFA & Passkeys
10:20 AutomatingCredential Security: How Password Managers Defend Against Phishing Sites
14:26 Positive FishTesting in Action: The Open-Book HootPhish Architecture
17:08 The Psychologyof Learning: Why Shaming Creates Learned Helplessness in IT
19:02 25 Years ofBreach Trends: The Human Factor from the Verizon DBIR
20:30 AI-DrivenPhishing: Grammar-Free Pretexting & Session Token Theft
22:54 The vCISOPerspective: The Shift from Neglect to Misguided Punishment
26:00 What Does TrueInnovation Mean to You? (Positive Reinforcement Over Industry Hubris)
29:09 Free Resourcesfor Individuals & 20% Discount with Code "Iferia Podcast"
