InfoSec:

"Never ever click on emails, all emails are malware."

Also InfoSec:

"Check out this new security feature which provides passwordless login right from an email link."

@jwgoerlich

InfoSec:
Mandatory Training: "Report all unexpected emails that pressure you with a sense of urgency. Do not click their links!"

Also InfoSec:
"Mandatory Training! You must take the training at this link, with your corporate login ID and password by this short deadline, OR ELSE!!!"

Me:
<< Reports phishing. >>

InfoSec:
"Seriously Jeff! That is Real Mandatory Training! You are really required to do it! What is wrong with you?!?"

Me:
How could I know the difference? 🤷

@JeffGrigg @jwgoerlich at my job, every time their are planning to send surveys or anything with links to be clicked, we get like 2 emails from the ceo or legal to tell us to expect it and it gets posted about on the intranet. Sometimes it even gets mentionned in a townhall. We also get so many fake phishing traps.