Insights from Pistachio
Research, guidance and news on phishing, security awareness and insider threats.
This is where Pistachio shares what we learn from running phishing simulations, training and insider threat detection across hundreds of organisations. Expect research, practical guidance for IT teams and MSPs, and news from the team.
New articles, reports and product updates published regularly.

New report - A Year of Phishing Behaviour in SMB and Mid-Market Organisations
12-month journey analysis for over 120,000 users across 600+ organisations
We believe in a learn-by-doing approach over snooze-worthy videos.
Instead, Pistachio tailors real-world scenarios so your team can build their cyber skills in a safe environment.



Meet Michael: A people person who unwinds by diving into new worlds
Meet Michael: Our Head of Customer Success

Copilot Broke Your Audit Log, but Microsoft Won’t Tell You
We discoverd a vulnerability in Microsoft 365 Copilot that allows users to access files without getting detected or appearing in the audit log.

The Case of Soham: The Cybersecurity Risk of Bad Hiring Practices
How multiple startups hired the same software developer, and what that reveals about their cybersecurity practices.

Meet Oleksandr: A creative mind cooking up great design and delicious meals
Meet Oleksandr: Our Senior Product Designer

How AI is changing the cybersecurity game: faster attacks, smarter tools, and a threat landscape that’s evolving by the day.
12-month journey analysis for over 120,000 users across 600+ organisations

M&S shoppers told to look out for these two emails
12-month journey analysis for over 120,000 users across 600+ organisations

Working from home 'making companies more vulnerable to M&S-style cyberattacks'
12-month journey analysis for over 120,000 users across 600+ organisations

Marks and Spencer says customer data was stolen in cyber attack
12-month journey analysis for over 120,000 users across 600+ organisations

Cybersecurity training integrated with your team’s go-to apps
Keep cybersecurity awareness top of mind, right within your team's daily workspace.