Why do employees still fall for phishing after security training? A cognitive security experiment explores how objective thinking may reduce risk.