Research, guides and category thinking on Behavioral Defense.
CYBERDISE 3.0 contains significant new functionality in AI phishing, LMS and training, threat reporting and message analysis, and even architectural enhancements. Here are the features we love most, and why.
Our internal selection committee quickly reached consensus on who should receive this award: the University of Osnabrück. It receives the “Awareness Customer of the Year 2026” award for the exemplary implementation of CYBERDISE in an on-premise configuration.
In 2025, CYBERDISE won 10 new partners and 400,000 new users under license, yet missed its targets by a significant margin. Only conversations with colleagues showed that what the team achieved in 2025 was extraordinary.
Attitude and behavior are related, but they are not the same. Confusing them is one of the main reasons why many awareness programs fail to deliver lasting risk reduction.
A Wall Street Journal article drawing on the study “Understanding the Efficacy of Phishing Training in Practice” questions whether phishing simulations and awareness training lead to meaningful risk reduction. A growing body of empirical research shows that well-designed awareness programs do improve real-world cyber risk behavior; what often fails is a narrow interpretation of what awareness is, how it should be embedded and how success should be measured.
Modern attacks happen in seconds, but awareness teams often work in days or weeks. CYBERDISE 2025 brings together AI reconnaissance, autonomous campaign components, multi-organizational management and a revamped content ecosystem — here are the features built this year.
How many phishing simulations to run and how often users should face cybersecurity eLearning is a recurring question in awareness programs – and far from academic. A sensitization effect begins to crumble after about three months, yet it would be dangerous to derive simple, universally applicable rules from that.
Like any other project, a cybersecurity awareness program can get off to a very bumpy start when it begins with an inappropriate mindset and management fails to recognize the value of awareness. We examined the mistakes and false expectations documented in a USENIX study and compared them with our own experience.
Phishing emails are becoming harder to detect, even for humans. A recent study tested various large language models (LLMs) for their ability to recognize malicious intent in emails and revealed significant differences in performance.
Reverse pitching turns the tables: investors, business angels and VCs apply to startup founders to be allowed to invest in their companies. Whether that is a good idea has two answers: no and yes.
After hundreds of conversations with investors over the past 15 years, the author turns the pitch around: five qualities worth wanting in an investor, and five to be wary of.
Product-market fit only makes things easier if you’ve got the rest right. Just having something on offer that people want does not guarantee business success.