Resilience to phishing attacks is failing to improve

The bad guys use phishing because it works, and it works because it exploits weaknesses in human psychology and organisational culture. We won't fix cybersecurity until we fix those things.