Found out last week that 90% of data breaches start with phishing emails according to Verizon's DBIR report

I read the 2024 Data Breach Investigations Report and was shocked that something as simple as clickin a fake email link is still the #1 way hackers get in, anyone else rely too much on common sense over actual protection tools?

2 comments

2 Comments

lisak2613d ago

honestly i get where you're coming from but i kind of disagree. common sense is way more important than people give it credit for. like if you train employees to stop and look at the sender's email address or hover over a link before clicking, that's already pretty effective. i've seen companies spend thousands on spam filters and endpoint protection only to have someone still fall for a fake HR email because they weren't paying attention. tools can catch some stuff but they miss a lot too, especially with personalized targeted phishing. maybe it's just me but i'd rather have a team that knows what a dodgy email looks like than rely on software alone. that report also says like 90% of breaches involve human error so common sense is literally the first line of defense.

lindab4913d ago

Right? It's like buying a high end security system for your house but then leaving the front door wide open with a sign that says "free TVs inside." You can throw all the tech money you want at the problem, but if someone's clicking on "URGENT: YOUR PAYPAL HAS BEEN HACKED" from "paypa1-secure@gmail.com", no filter in the world is saving that. And yeah, I've seen it too. Big company spends a fortune on some fancy AI spam blocker, and then the CEO's assistant opens a PDF called "invoice_june.pdf" from an address that's off by one letter. Common sense training is way cheaper than the alternatives too.