For over 20 years, phishing has been the most common type of email threat. In a typical phishing attack, cybercriminals send malicious emails to trick users into giving up sensitive information or downloading malware onto their devices. Phishing campaigns often employ social engineering techniques used to manipulate psychology. These scams usually encourage recipients to act rapidly, without stopping to think things through, before interacting with a fraudulent email they have received. In highly targeted spear phishing campaigns, attackers go after specific individuals, using information gathered through research to pose as someone that person knows and trusts. Because phishing scams exploit user behavior, traditional anti-phishing programs often involve user training and education. However, human behavior is ultimately unpredictable, and more than security awareness training is needed to safeguard against phishing and other email-borne attacks. Ensuring adequate phishing protection via a comprehensive cloud email security solution is imperative in safeguarding your users, key assets, and brand.