What is phishing and how do organisations reduce it?

Fraudulent messages that trick people into revealing credentials or running malware. Reduce it with user awareness training, email authentication (SPF, DKIM, DMARC), link and attachment filtering, and phishing-resistant MFA.