If you are planning October and looking for “the” 2026 theme, you will find two of them. That is not a mistake in someone’s blog post. The two organizations that co-founded the campaign published different wording this year, and knowing which is which saves you an awkward correction in front of your exec sponsor.
Most October campaigns are a poster, a company-wide email, and one 45-minute video that people click through with the tab muted. Then the click rate dips for three weeks and goes back to normal.
The plan below is the opposite shape. One small thing per working day, four themed weeks, and nothing that needs more than 20 minutes of anyone’s time.
Every category in the OWASP MCP Top 10 now has a dedicated exercise on RansomLeak. Ten scenarios covering the ten ways the connection between an AI agent and its tools fails. All free, no account required.
The OWASP MCP Top 10 lists the security risks of the Model Context Protocol, the standard that lets agents call external tools and read external data. This course turns each category into a scenario you work through rather than a definition you read.
Hoxhunt and KnowBe4 are often shortlisted together, which is odd, because they are not really the same product. KnowBe4 is a broad awareness platform with a mature phishing engine attached. Hoxhunt is an adaptive phishing engine with training attached. Buyers who understand that distinction early make a much faster decision.
KnowBe4 and Proofpoint Security Awareness are the two names that appear on almost every enterprise shortlist, and the choice between them usually comes down to one question that has nothing to do with training. Do you already run Proofpoint for email security? If you do, Proofpoint’s awareness product inherits threat intelligence that KnowBe4 cannot replicate. If you do not, KnowBe4’s standalone breadth and simulation tooling generally wins.
