Just found out 90% of data breaches come from phishing emails, not hackers breaking in

I was reading through Verizon's 2023 Data Breach report last night and that stat jumped out at me. I always imagined some dude in a hoodie cracking passwords, but nope, it's mostly people clicking bad links. Makes me wonder why we spend so much on firewalls when the real weak point is the person sitting at the keyboard. Has anyone else changed their training approach after seeing numbers like that?

2 comments

2 Comments

river_wright21h ago

You mentioned "the real weak point is the person sitting at the keyboard" and that got me thinking. Do you think the real fix is better training, or do we just need to accept people will always click and design systems that can't be tricked? I've seen both approaches argued but nobody ever really settles it.

barnes.kai18h ago

Ha, training's a joke - people forget it by lunch. Better to build systems that just don't let you screw up.