Phishing simulation
Everything you need to plan, execute, and measure phishing simulation campaigns. From industry benchmarks to step-by-step guides, explore our analysis to strengthen your team's resilience.
13 articles
BigBear 2.0: the kit that bypassed MFA at 258 organizations
BigBear 2.0 (Evilginx2, AiTM) bypassed MFA at 258 organizations and stole 5,137 credentials; France was the 2nd-most-hit country, per CloudSEK.
Read articleANTS / France Titres breach: 11.7 million accounts, full autopsy
Deep dive into the ANTS (France Titres) breach: 11.7M accounts exposed, a 15-year-old suspect, and the phishing ecosystem the leak now fuels.
Read articlePhishing statistics in France: the 2026 reference figures
Every verified phishing statistic for France: ANSSI, Cybermalveillance, CESIN, Verizon DBIR, IBM, Hiscox. Each figure with its source, year and link.
Read articleCEO fraud in France: the costliest BEC cases and how to stop them
Pathé (EUR 19.2M), Vallourec (EUR 22M) and other costly CEO fraud cases in France: techniques, case law, and how to protect your business from BEC.
Read articleFrance Travail breach: 43M records stolen, a €5M CNIL fine
Deep dive into the France Travail breach: 36.8M victims, social engineering via Cap Emploi, a €5M CNIL fine (SAN-2026-003), and lessons for SMEs.
Read articleHow to trace the origin of a suspicious email using headers
Email headers reveal the real sender, the path taken, and authentication results. A step-by-step practical guide to analyzing the headers of a phishing email.
Read articleCybersecurity training vs phishing simulation: what works?
E-learning, in-person workshops, phishing simulation: an objective comparison of security awareness methods with effectiveness data and ROI for SMBs.
Read articlePhishing simulation for businesses: a practical 2026 guide
How to plan, run, and measure a phishing simulation campaign. Methodology, templates, timing, and results analysis for SMBs.
Read articlePhishing psychology: why the smartest people still click
The cognitive biases exploited by phishing: authority, urgency, social proof. Why intelligence doesn't protect you and how to train real reflexes.
Read articleQuishing, vishing, smishing: new forms of phishing in 2026
Quishing, deepfake vishing, smishing, AI phishing: the 5 new threats bypassing traditional defenses. How to recognize them and protect yourself.
Read articlePhishing awareness software: 10 criteria to choose (2026)
10 objective criteria for evaluating phishing simulation platforms. Scoring grid, pitfalls to avoid, and a comparison of leading solutions on the market.
Read articlePhishing click rate by industry: 2026 benchmarks and targets
Average phishing click, report and credential-entry rates by industry, with dated sources, plus realistic targets at 3, 6 and 12 months.
Read articleBusiness phishing: 2026 statistics, real cases and defenses
Phishing is the #1 initial attack vector (16%, IBM 2025). 2026 statistics, attack types, real-world examples from France, and solutions to protect your SMB.
Read article