Insights from Pistachio
Research, guidance and news on phishing, security awareness and insider threats.
This is where Pistachio shares what we learn from running phishing simulations, training and insider threat detection across hundreds of organisations. Expect research, practical guidance for IT teams and MSPs, and news from the team.
New articles, reports and product updates published regularly.

New report - A Year of Phishing Behaviour in SMB and Mid-Market Organisations
12-month journey analysis for over 120,000 users across 600+ organisations
We believe in a learn-by-doing approach over snooze-worthy videos.
Instead, Pistachio tailors real-world scenarios so your team can build their cyber skills in a safe environment.



Announcement: Pistachio Raises €3.25m!
Big things are happening at Pistachio! We've secured €3.25m in funding to amplify our cybersecurity efforts. Read about our mission to empower digital freedom of movement.

The Rise of Phishing Voicemails: Understanding the Threat Landscape
Dialing into danger: Learn how phishing voicemails are on the rise and why they pose a significant threat

From Likes to Threats: The Risks of Oversharing on Social Media
Is oversharing on social media putting you at risk? Uncover the potential consequences and learn how to safeguard yourself online.

You Can’t Gamify Security Awareness
Building a security culture without games? Explore why gamifying security awareness isn't effective and how we've tackled the issue at Pistachio.

The Role of AI in Cybersecurity: Use Cases and Challenges
From detecting anomalies to proactive threat prevention, explore the dynamic role of AI in cybersecurity. Learn about the innovative applications of artificial intelligence and the obstacles it encounters in securing digital environments.

Enhancing Cyber Resilience: NIS2 and Its Implications for Security Awareness
Explore the key features and objectives of the updated EU-wide cybersecurity directive, its impact on security awareness, and what it means for your organization.

Think Twice Before Whitelisting for Attack Simulations
The dangers of whitelisting for attack simulations: what you need to know.

Cybersecurity in The Age of Remote Work: How To Adapt Your Training for a Changing Landscape
Learn best practices for remote work cybersecurity to keep your digital life safe and secure. From phishing awareness to secure remote access, equip yourself with essential knowledge for the age of remote work.

How Do We Solve AI Prompt Injection Attacks? It’s a Secret
Explore the emerging threat of prompt injection attacks in the AI era and the challenges they pose to cybersecurity