Insights from Pistachio
Research, guidance and news on phishing, security awareness and insider threats.
This is where Pistachio shares what we learn from running phishing simulations, training and insider threat detection across hundreds of organisations. Expect research, practical guidance for IT teams and MSPs, and news from the team.
New articles, reports and product updates published regularly.

New report - A Year of Phishing Behaviour in SMB and Mid-Market Organisations
12-month journey analysis for over 120,000 users across 600+ organisations
We believe in a learn-by-doing approach over snooze-worthy videos.
Instead, Pistachio tailors real-world scenarios so your team can build their cyber skills in a safe environment.



How We Crafted 45 Brands in Two Weeks
How we created great-looking, timeless, and trustworthy fake brands to appear in our simulations

Why Don't Employees Care About Security Awareness?
How to get employees to care about security awareness training: Important areas that matter

Unveiling Cybersecurity Myths and Misconceptions
Explore the common cybersecurity myths and misconseptions

Spoofing Attacks - Identification and Prevention
Explore the tactics employed by cybercriminals to mask communication through spoofing: Learn how to identify and prevent spoofing attacks.

Playing Corporate Politics for Cybersecurity
Explore strategies for CISOs to navigate corporate politics effectively for enhanced cybersecurity: Learn how to turn internal challenges into opportunities for building stronger security programs.

The Art and Science of Automating Phishing Simulations
How Pistachio automates phishing simulations to choose the right attacks for each user

HTTPS Does Not Mean Safe
Expore what HTTPS secures, what it does not solve, and how to fill in the gaps.

Pistachio’s 2023 Year in Review
Find out about all of the changes the team made to Pistachio over the last five months as we close out the end of 2023.

Collecting Our Tracks With Deployment Events
Collecting deployment data for better debugging processes