If you think cybersecurity is just about tools and technology, think again.

In this episode of And Security For All, host Kim Hakim sits down with Keith McMenamin, VP of IT at Visit Philadelphia, to break down why user awareness is still one of the most critical—and overlooked—components of cybersecurity today.

As cyber threats evolve and AI-driven attacks become more sophisticated, even the most experienced users can be fooled. Keith shares real-world examples of modern phishing scams, explains how attackers exploit human behavior, and discusses why employees are both the biggest target and the greatest opportunity for defense.

You’ll learn:

• Why phishing and social engineering are more convincing than ever
• How to move from security training to building a true security culture
• The importance of creating a no-blame environment where employees feel safe reporting mistakes
• Why multi-factor authentication and awareness together stop most attacks
• How organizations can turn users into a “human firewall”
• The growing risks of AI, deepfakes, and evolving cyber threats

This conversation also explores how security leaders balance protection with productivity, why executive buy-in is critical, and how collaboration across the cybersecurity community is shaping the future of defense.

Whether you’re a security leader, IT professional, or everyday user, this episode will change how you think about the human role in cybersecurity.

🔐 Because in today’s threat landscape, hackers don’t just break in… they log in.