Fable Security, the human risk management platform that changes how employees behave, today announced the general availability of vishing simulations. The new capability lets security teams test how their organization holds up against voice-based social engineering wherever attackers use it, from help desk and service desk calls to vendor payment changes and urgent requests made in an executive’s name, and then turn every result into targeted, measurable behavior change.

Many of the most damaging social engineering attacks in recent years started with a phone call rather than an email. Attackers call the help desk to get a password reset or a new MFA device, pose as a trusted vendor to redirect a payment, or clone an executive’s voice to push through an urgent wire transfer or a request for sensitive data. CrowdStrike reported that vishing intrusions doubled in the first half of 2026 compared to the second half of 2025, and inexpensive voice cloning now lets attackers sound like a real employee, vendor or executive without any special skill. Most security awareness programs were built around email, so they can’t measure how employees respond when the attack arrives as a phone call.

“Voice has become one of the easiest ways into a company, because a convincing caller can get a password reset, a changed bank account or an urgent payment approved in a way no phishing email ever could,” said Nicole Jiang, CEO and co-founder of Fable Security. “Security teams have had no good way to see how their people respond when the attack comes over the phone. With vishing simulations, they can find out safely, on their own terms, and then use Fable to change the behavior behind the result instead of just reporting it.”

How Fable vishing simulations work

Fable vishing simulations call employees with AI voice impersonations based on pretexts attackers rely on most, including password and MFA reset requests, vendor and payment fraud, and executive impersonation. Security teams stay in control of every call:

  • Choose the lines in scope. Teams decide which phone lines are called, such as the IT help desk, service desk or accounts payable, so no call reaches a person or line they did not plan for.

  • Pick or create a scenario. Teams pick from more than 100 pre-built scenarios based on real attacker pretexts, or build their own, such as an employee locked out of their account, a vendor updating its banking details or an executive asking for an urgent favor, and approve the authorized deepfake voice that delivers it.

  • Preview before anything goes live. Teams hear the call the way their staff will hear it before it is placed.

  • Get transcripts and evidence. Every call returns a full transcript and a record of what was disclosed or granted, giving security leaders concrete evidence to bring to the owners of verification policies.

From a single test to lasting behavior change

Unlike standalone vishing tools, Fable vishing simulations run on the same platform customers use for the rest of their human risk program. When a call succeeds, Fable delivers targeted follow-up to the specific people and teams involved, focused on the missed verification step, instead of assigning everyone another generic training module. Security teams can then measure whether that behavior changes over time and report the results to their board and auditors.

Vishing simulations also round out Fable’s coverage of AI-driven impersonation. Deepfake video training in Fable AI Studio helps finance staff, executive assistants and help desk analysts practice out-of-band verification, and human-led red team engagements test complex, multi-channel scenarios.

Early feedback from Fable customers highlights both the realism of its voice simulations and the demand for hands-on preparation.

“It’s amazing how realistic that sounds. It’s convincing, and that’s what’s scary. That’s exactly the kind of call our people need to be ready for.”

— Manuel Bernal, VP of Technology, Greylock

“Vishing simulation is exactly what we needed. I’m excited to get hands-on, and I’m 100% putting it to work right away.”

— Aneela Prasad, Sr. Cybersecurity Strategy & Engagement Analyst, DFW

Availability

Fable vishing simulations are available today for new and existing Fable customers. To see a vishing simulation and learn which workflows attackers are most likely to target, visit https://fablesecurity.com/vishing/demo-request

Fable CEO Nicole Jiang and co-founder CPO Sanny Liao will discuss AI-driven social engineering and how attacks that chain together several channels are changing the threat landscape in a live webinar on Nov. 17, 2026. Registration is open at https://fablesecurity.com/resources/events/webinar/inside-the-new-wave-of-social-engineering-a-live-session-with-fables-founders/

About Fable Security

Fable Security is the human risk management platform that secures the human layer by changing how employees behave. Fable connects to the security and business systems an organization already uses to detect risky behavior, evaluates risk at the individual and team level, and intervenes in the flow of work with personalized videos, nudges, chats and simulations. It then measures whether behavior and risk actually changed. Fable was founded by Nicole Jiang and Sanny Liao, who previously built behavioral AI systems at Abnormal Security. Enterprises including Workday, Pennymac, Genesys and Dayton Children’s Hospital use Fable to reduce human risk. Learn more at fablesecurity.com.

Source: CrowdStrike 2026 Threat Hunting Report

Media gallery

About The Author
Business Wire