A security team can sink an infinite amount of time and resources into strengthening your infrastructure, but it’s all for nothing if a default password is used by an exec, or someone in HR makes the mistake of responding to a clever phishing message. Cybercriminals will always find the path of least resistance and for most organizations, the easiest way in is through the people.
Source: If you want to safeguard your organization, focus on people | 2021-04-19 | Security Magazine