The most important defense is remaining humble and not falling into the mindset that we would never get pulled in by a phisher. Phishers are more sophisticated than we may think. They come up with new tricks all the time. It's only a matter of time until one of them throws us off balance.

As Cloudflare officials wrote in their disclosure: "Having a paranoid but blame-free culture is critical for security. The three employees who fell for the phishing scam were not reprimanded. We're all human, and we make mistakes. It's critically important that when we do, we report them and don't cover them up."