Phishing tests should look beyond clicks, SecurityWeek says · Digg