As technology evolves and geopolitical tensions rise, the cyberthreat landscape grows more complex by the day. The survival of our organizations depends on radically strengthening our human defenses. Read our report for expert insights on how to achieve this.
Download the report
of security professionals agree that the threat landscape is the most challenging it has been in the past 5 years.
Less than one-third (31%) believe the situation has any chance of improving in the next 12 months.
consider that their company is at a high risk of suffering a cyberattack that would have a substantially negative impact on their organization.
organizations have experienced a successful cyberattack in the last 3 years.
Artificial intelligence
79% of security leaders agree that the use of generative AI by cybercriminals to create social engineering attacks is a concern.
Global instability
75% agree that the geopolitical situation has increased the security risk of their organization.
Interconnectivity
80% of security professionals said that supply chain security has become a more significant concern to them.
of security leaders say that building a security culture in their organization is a priority.
Essentially every organization said that senior executives and the board are involved in their cyber security governance and decision-making.
organizations increased their cyber security budget in the last 2 years.
Cyber security is becoming a core component of business strategies, but not all organizations are looking at the right metrics and tools to determine the state of their security culture and to strengthen it.
In our report, you will find:
You can have your system fully protected with technical measures and security management, but if you don’t create a human layer that is strong and helpful in protecting your organization, you’re lacking capacity.
Inge van der Beijl Head of Expertise and Director of Innovation at Northwave
Cybercriminals’ methods are varied, from intimidation to disinformation campaigns targeting journalists or stealing identities to manipulate information before it’s published. We encounter attempts to exert influence in various forms every day.
Yorn Ziesche CISO at Handelsblatt Media Group
The escalation of disinformation represents a concerning trend in the cyber security landscape. It is being used at every turn to discredit political opponents and influence elections.
Nathalie Granier Cyber threat intelligence analyst and human behavioral researcher
Society slept through the internet and social media. As a result, we as a society may be at risk of sleeping through AI, with risks that we cannot foresee today.
Oliver Zausch Responsible for cyber security at NATO Allied Maritime Command
State actors and conflict parties often try to create uncertainty and sow doubts about the functioning of state institutions, defense capabilities, and security of supply.
Tim Zahn Commander of the Bundeswehr Cybersecurity Center
The only way to stay on top of the changing threat landscape […] is by integrating different security control measures. This should not simply be a multi-layered security approach but a more holistic one where we orchestrate everything based on risk, whether it’s technology, infrastructure, or behavioral risk.
Shelby Flora Managing Director at Accenture Security UK
Now, the person is our key asset. They are our primary attack surface. That’s where we need to be focusing our attention and our controls. This evolution into human risk management is very much needed, and it will be interesting to see how it develops to protect our organizations going forward.
Andrew Rose Chief Information Security Officer at SoSafe
Includes six in-depth interviews and helpful security best practices to help your organization effectively manage your human risk.
Social engineering basics still work
Top 5 tactics in successful attacks
Click rate
Interaction rate
Over a third of users click on harmful content in the emails…
…and almost 2 of 5 of them continue to interact with that content
Top subject lines and
emotional triggers in emails
Email is still the most popular channel for phishing, but its domination is ebbing as the diversification of attack channels grows.