What happens when a cybersecurity company gets phished?

A Sophos employee was phished, but we countered the threat with an end-to-end defense process