The Unseen Vulnerability in Your Company's Cybersecurity

Dr. Niklas Richter · 2026-09-01

Let's be honest for a second. When you think about protecting your business, you probably picture firewalls and fancy software. You might even have a decent budget for it. But the truth is, there's a gaping hole in most security plans that no algorithm can patch. It's human. I sat down with Manon Vandebergh, the COO of Phished, to peel back the layers on this. She pointed out something that stuck with me: cybercriminals aren't just getting smarter; they're getting more personal. Their phishing attacks are now so convincing they'd fool most of us on a busy Tuesday morning. The scariest part? Your team is both your first line of defense and your biggest potential liability. ### Why Your Team is the Critical Link We spent a good chunk of our conversation talking about the human element. Manon explained that security training can't be a one-and-done seminar. It needs to be ongoing, realistic, and woven into your company's culture. The newest phishing techniques don't rely on obvious spelling mistakes anymore. They mimic internal memos, spoof executive email addresses, and create a false, urgent need to act. Recognizing a suspicious email now is less about looking for red flags and more about trusting your gut. Does this request for a wire transfer follow our normal procedure? Would my CEO really ask for gift cards via email? That moment of pause is your most powerful tool. ### Simple Steps You Can Take Today You don't need a million-dollar IT department to start building a safer organization. Manon shared a few immediate actions any business leader can implement: - **Implement mandatory multi-factor authentication (MFA) for all accounts.** It's the single most effective barrier. - **Run simulated phishing tests with your own team.** Use the results for coaching, not punishment. - **Create clear, simple reporting channels.** If an employee clicks a bad link, they should feel safe reporting it immediately, not hiding it out of fear. - **Review financial controls.** Require verbal confirmation for any payment or transfer request that comes via email. As Manon put it, 'Security isn't a tech problem; it's a people problem. And people can learn.' ### Building an International Scale-Up from Belgium Our talk wasn't just about threats, though. We dove into the incredible growth story of Phished itself. How do you build a world-class cybersecurity company from Belgium? Manon credits their 'unfair competitive advantage'—a deep, company-wide commitment to a culture of radical honesty, or 'Parlez-Vrai.' This means creating an environment where bad news travels as fast as good news, where challenges are surfaced immediately, and where every team member feels psychologically safe to speak up. It's this culture, she argues, that fuels innovation and resilience. She also made a compelling case for why founders should stay deeply involved in sales long after they can afford to hire a team. That frontline customer contact is an irreplaceable source of market truth. ### A Final Word on Leadership in Tech We wrapped up by talking about women in tech and leadership paths. Manon's background isn't in traditional computer science, and she's passionate about debunking the myth that you need a technical degree to thrive in the technology sector. Success is about understanding problems, building great teams, and driving a vision forward—skills that come from all kinds of experiences. This conversation was packed with insights for any entrepreneur, executive, or leader who wants to protect their company while fostering meaningful growth. It’s a reminder that the strongest security strategy and the healthiest company culture start with the same thing: valuing and empowering your people.