My company was recently acquired.
I was given a new email address and a new web-based email account <my_name>@BIGCORP.COM
The *very first* email in my new inbox, was titled "Mandatory Security Training!" and came with a link, which I stupidly clicked and entered my newly provided credentials, only to be informed that this had been a phishing email from their "IT security team" and that I had failed.
So, like a good boy, I went to change my password.
"Password cannot be changed because you have had this one for less than 7 days"
Biting the hand that feeds IT
