Skip to content

Blog

Research, guides and category thinking on Behavioral Defense.

Title card "3 Reasons Why your employees are hacked in 2026": notes naming the main reasons (technical deficiencies, lack of knowledge, behavioral patterns) and the three things employees must master (recognize phishing mails, use secure passwords, read internet addresses)
human-riskThe Three Reasons Why Employees Get Hacked

Nearly half of all successful cyberattacks start with a negligent employee. Search engines will tell you it comes down to phishing, weak passwords and careless data handling. Look closer and all three say the same thing: this is about people.

Title card: "NIS2 is in the budget. Not yet in the systems." with the cover of the CIO/CSO/Computerwoche study
awarenessNIS2 Is in the Budget - Not Yet in the Systems

A study by CIO / CSO / Computerwoche, based on 324 interviews with senior IT decision-makers across DACH, shows how NIS2 is reshaping the way organisations think about cybersecurity. But compliance and actual resilience are still far apart.

Two men back to back: a frowning one with a small "MS" shield takes hits, a smiling one blocks attacks with a big "AW" shield
comparisonMicrosoft Defender Attack Simulator - What is Wrong With It?

Microsoft Defender Attack Simulator is included with E5 licenses, and several German and Swiss mid-sized companies have let their awareness vendor contracts expire to rely on it instead. Organizations that genuinely care about attentive, well-sensitized employees are not well served by it.

Graphic "Behavior-Oriented Security Awareness" with six principles, from realistic conditions and measuring actions to habits
human-riskWhat is Behavior-Oriented Cybersecurity Awareness?

Behavior-oriented awareness measures success by observable change in risk behavior, not by knowledge completion, positive feedback scores or course consumption. It treats employees as human decision systems – not as information storage units.

Title card "Proper awareness is:" with eight notes (behavior-driven, simulation-based, continuous, measurable, technically integrable, AI-powered, personalized and customized, scientifically grounded) beside a thoughtful man
awarenessWhat is Proper Cybersecurity Awareness?

An entire industry often offers customers products and services with little benefit. In the cybersecurity awareness market, they often do not aim to change behavior.

Graphic "Free Phishing and Training Tool – What does it do?" with five questions about the Freemium Edition
productWhat Does Our Free Phishing and Training Tool Do?

The CYBERDISE Freemium Edition is a free phishing tool and learning environment: technically speaking, an attack simulator and a lean LMS with a content editor and user management. Here are the answers on what it includes, what it needs to run and where its limitations are.