Insights from Pistachio
Research, guidance and news on phishing, security awareness and insider threats.
This is where Pistachio shares what we learn from running phishing simulations, training and insider threat detection across hundreds of organisations. Expect research, practical guidance for IT teams and MSPs, and news from the team.
New articles, reports and product updates published regularly.

New report - A Year of Phishing Behaviour in SMB and Mid-Market Organisations
12-month journey analysis for over 120,000 users across 600+ organisations
We believe in a learn-by-doing approach over snooze-worthy videos.
Instead, Pistachio tailors real-world scenarios so your team can build their cyber skills in a safe environment.



Why New Starters Are an Attractive Target for AI Phishing
Why new starters are increasingly targeted by AI phishing, and how organisations can reduce the risk from day one.

Phishing in 2026: The Trends Outpacing SMB Defences
How phishing is evolving in 2026, and why traditional security awareness training is struggling to keep up.

Why Recruitment Agencies Face a Unique Insider Threat Problem
Why recruitment agencies face unique insider risks, and how behavioural detection helps identify data theft before employees leave.

Security Awareness Training in Construction: Is Your Programme Built for the Right Threats?
Why generic security awareness training falls short in construction, and how role-specific phishing simulations help build stronger cyber resilience

Why Law Firms Need a Different Approach to Security Awareness Training
Why traditional security awareness training falls short in law firms, and how to improve resilience.

Security Awareness Training in the Energy Sector: Is Your Programme Falling Short?
Why traditional security awareness training is struggling to keep pace with today's energy sector threats.

Why Traditional Security Awareness Training Is Failing The Education Sector
What actually matters when evaluating security awareness training platforms

The Operational Risks Behind Manufacturing's Cybersecurity Problem
Why manufacturing remains cybercriminals' top target, and how continuous security awareness training helps reduce exposure.

Security Awareness Training Is Broken. Here's How HR and IT Can Fix It.
Why cybersecurity awareness training often fails, and how HR and IT can work together to build lasting cyber resilience.