Social Engineering is the number 1 way people and businesses are getting compromised.  Legitimate looking emails trick HR/Finance into sending W2s, wiring money, or clicking malicious links and attachments.  I recently partnered with news station WWMT to show home users just how easy it can be for attackers to trick you with innocent looking emails:


VDA Labs offers a basic security training course to help educate companies about the dangers of social engineering.