Almost all successful cyberattacks, 98%, include some component of social engineering, and fewer and fewer are limited to a single channel. According to CrowdStrike, vishing activity (voice phishing) grew by 442% between the first and second half of 2024, and it is estimated that up to 41% of social engineering campaigns already combine email, voice calls and messaging in the same coordinated sequence. Added to this is that generative artificial intelligence participates in more than 80% of these attacks, facilitating everything from phishing emails indistinguishable from real ones to voice cloning from just three seconds of audio.
Faced with this scenario, Zepo Intelligence, Zepo’s Human Risk Management platform, has announced the launch of two new capabilities to combat new cyberattacks: Learning Studio and Multiattack Simulations.
A risk that no longer comes through a single channel
Corporate email compromise (BEC) fraud cost companies more than $16.6 billion in 2024, with an average of $137,000 per incident, according to FBI figures collected in its IC3 report. 70% of organizations have already been victims of at least one vishing attack, with an estimated average cost of $14 million annually per company, while impersonation of executives and hybrid fraud, a call that generates trust, followed by an email that closes the scam, have become the preferred route for cyberattacks and larger fraud.
Despite this, most cybersecurity awareness programs continue to simulate a single vector, almost always email, leaving out the multichannel sequences that today generate the greatest losses. When multivector tests exist, they usually depend on services managed by third parties, with weeks of planning and without the ability to be repeated on demand.
Multiattack Simulations allows security teams to design campaigns that chain multiple attack vectors, such as phishing and vishing, into a single sequence that evolves based on each employee’s reaction, replicating the actual behavior of an attacker rather than an isolated delivery.
Training cannot go slower than attacks
The security awareness training market will reach $6.74 billion in 2026 and is projected to reach $14.66 billion in 2031, according to Mordor Intelligence, while the broader Human Risk Management market could double to $22.7 billion in 2034. This growth reflects a category shift: In 2024, Forrester retired the classic “security awareness and training” label in favor of “Human Risk Management”, an approach based on behavioral analytics and continuous training instead of static compliance courses.
The challenge is that creating a traditional training course still requires instructional designers, review cycles, and external agencies, a weeks-long process that often ends when the cyberattack that motivated the training has already changed.
Security Awareness Training Market to Reach $6.74 Billion by 2026
Learning Studio is the AI-based content engine that allows you to generate cybersecurity training adapted to the context, industry and risk level of each organization in a matter of minutes, with human supervision and quality control, approvals and regulatory compliance at every stage.
A connected platform as an answer
Both capabilities are integrated into Zepo Intelligence, so that the results of the simulations directly feed the training content and vice versa: the more it is simulated, the more precise the training is; The better the training, the more realistic the next simulation can be. It is a direct response to one of the most repeated conclusions by sector analysts: organizations with continuous and high-frequency training programs have managed to reduce their vulnerability rates to phishing from 34.3% to 4.6%.
With this launch, Zepo consolidates its commitment to turning human risk management into a continuous, data-driven process, rather than an annual compliance exercise.
