As technology evolves and geopolitical tensions rise, the cyberthreat landscape grows more complex by the day. The survival of our organisations depends on radically strengthening our human defences. Read our report for expert insights on how to achieve this.
Download the report
of security professionals agree that the threat landscape is the most challenging it has been in the past 5 years.
Less than one-third (31%) believe the situation has any chance of improving in the next 12 months.
consider that their company is at a high risk of suffering a cyberattack that would have a substantially negative impact on their organisation.
organisations have experienced a successful cyberattack in the last 3 years.
Artificial intelligence
79% of security leaders agree that the use of generative AI by cybercriminals to create social engineering attacks is a concern.
Global instability
75% agree that the geopolitical situation has increased the security risk of their organisation.
Interconnectivity
80% of security professionals said that supply chain security has become a more significant concern to them.
of security leaders say that building a security culture in their organisation is a priority.
Essentially every organisation said that senior executives and the board are involved in their cyber security governance and decision-making.
organisations increased their cyber security budget in the last 2 years.
Cyber security is becoming a core component of business strategies, but not all organisations are looking at the right metrics and tools to determine the state of their security culture and to strengthen it.
In our report, you will find:
You can have your system fully protected with technical measures and security management, but if you don’t create a human layer that is strong and helpful in protecting your organisation, you’re lacking capacity.
Inge van der Beijl Head of Expertise and Director of Innovation at Northwave
Cybercriminals’ methods are varied, from intimidation to disinformation campaigns targeting journalists or stealing identities to manipulate information before it’s published. We encounter attempts to exert influence in various forms every day.
Yorn Ziesche CISO at Handelsblatt Media Group
The escalation of disinformation represents a concerning trend in the cyber security landscape. It is being used at every turn to discredit political opponents and influence elections.
Nathalie Granier Cyber threat intelligence analyst and human behavioural researcher
Society slept through the internet and social media. As a result, we as a society may be at risk of sleeping through AI, with risks that we cannot foresee today.
Oliver Zausch Responsible for cyber security at NATO Allied Maritime Command
State actors and conflict parties often try to create uncertainty and sow doubts about the functioning of state institutions, defence capabilities, and security of supply.
Tim Zahn Commander of the Bundeswehr Cybersecurity Center
The only way to stay on top of the changing threat landscape […] is by integrating different security control measures. This should not simply be a multi-layered security approach but a more holistic one where we orchestrate everything based on risk, whether it’s technology, infrastructure, or behavioural risk.
Shelby Flora Managing Director at Accenture Security UK
Now, the person is our key asset. They are our primary attack surface. That’s where we need to be focusing our attention and our controls. This evolution into human risk management is very much needed, and it will be interesting to see how it develops to protect our organisations going forward.
Andrew Rose Chief Information Security Officer at SoSafe
Includes six in-depth interviews and helpful security best practices to help your organisation effectively manage your human risk.
Used by 4.5M+ users
Implement enterprise-grade security awareness in just 2 days with only 20 minutes of management time required.
See how our gamified, micro-learning approach gets 70% active reporting in 6 months.
See how organizations like yours reduced phishing click rates from 20% to 3.5% in just 18 months.
Compliance & security
Use our online test environment to see how our platform can help you empower your team to continuously avert cyber threats and keep your organization secure.
Security awareness training
Create safer habits through personalized, gamified, and story-based cybersecurity awareness training.
Smart phishing simulations
Improve your employees’ threat reporting skills and accelerate threat detection.
Always-on human security copilot
Transform your workforce into a proactive defence line with our AI-powered conversational chatbot Sofie.
Human risk management tool
Continuously monitor, measure, and mitigate human risk in real time with the Human Risk OS platform.
Discover our solutions
with our product tours
Start virtual tour
Reports 
Guides 
Blog 
Glossary 
Perks 
Customer stories 
Webinars 
Replays 
Podcast 
All events 
Human Firewall Conference 
Danger Lab 
Why SoSafe 
Careers 
Product news 
News & press 
Contact 
Social engineering basics still work
Top 5 tactics in successful attacks
Click rate
Interaction rate
Over a third of users click on harmful content in the emails…
…and almost 2 of 5 of them continue to interact with that content
Top subject lines and
emotional triggers in emails
Email is still the most popular channel for phishing, but its domination is ebbing as the diversification of attack channels grows.