Three quarters of cybersecurity breaches are down to human error

A new poll claims that 74 percent of all cybersecurity breaches are caused by human factors. According to the data, published in  The State of Email and Collaboration Security 2024 report from Mimecast, cyber threats are growing at an unprecedented pace, and the year ahead is fraught with cybercrime and incidents anticipated ahead of the busy election year where over 50 countries head to the polls. With new threats like AI and deepfake technology, the stakes are higher than ever to execute a strong cyber defence.

Mimecast has expanded the eighth edition of this annual report to include insight on collaboration security in addition to email. SOECS is based on an in-depth global survey of 1,100 information technology and cybersecurity professionals.

Highlights from this year’s report include:

• Human risk is today’s biggest security gap, and IT teams must better equip employees with the right tools and training. 74 percent of all cyber breaches are caused by human factors, including errors, stolen credentials, misuse of access privileges, or social engineering.
• IT teams are proactively stepping up their defence strategies, especially as AI presents new challenges. The emergence of AI is accelerating the spread of phishing and ransomware by making it easier for threat actors to perpetrate successful attacks. 8 out of 10 respondents are concerned about new threats posed by AI and 67 percent say AI-driven attacks will soon become the norm. As companies prepare for new threats, they’re viewing cyber risks as a bigger business problem, not just an IT problem.
• Email remains the primary attack vector for cyber threats like phishing, spoofing, and ransomware, but collaboration tools pose new and dangerous points of entry for bad actors. 70 percent expect collaboration tools to pose new threats, and 69 percent believe it is likely that their company will be harmed by a collaboration tool-based attack.

“Emerging tools and technologies like AI and deepfakes, along with the proliferation of collaboration platforms are changing the way threat actors work; but people remain the biggest barrier to protecting companies from cyber threats,” said Marc van Zadelhoff, Mimecast CEO. “Cybersecurity and IT teams need to work with wider business leaders to prioritize understanding human risk. With the right tools and education, companies can better safeguard against threats and manage human risk.”