{
  "id": 14092024,
  "title": "'People aren’t perfect, and everyone knows it': Security experts still see humans as the biggest threat to their business",
  "url": "https://urgent.news/2026/10/13/people-arent-perfect-and-everyone-knows-it-security-experts-still-see",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-13T02:05:00.000Z",
  "source": {
    "name": "TechRadar",
    "slug": "techradar",
    "url": "https://www.techradar.com/pro/security/people-arent-perfect-and-everyone-knows-it-security-experts-still-see-humans-as-the-biggest-threat-to-their-business"
  },
  "original_language": "en",
  "account": "Human error continues to pose the greatest threat to cybersecurity, according to industry experts. A recent Kaseya survey of over 1,100 IT professionals and managed security service providers (MSPs) has revealed that 68% of respondents cite human error as the most concerning attack vector over the next year. This perspective contrasts with the 55% who highlight email-based scams as the top threat.\n\nThe survey indicates that user practices and a lack of training are the primary contributing factors in recent security incidents, with 80% of contributing factors linked to poor user behavior or insufficient cybersecurity education. Other significant concerns identified in the survey include social engineering (26%), distraction (23%), and email attacks (55%).\n\nDespite acknowledging the human element, many organizations remain under-resourced to address these challenges. Only 20% of surveyed IT departments reported having budgets that are growing in line with the risks they face, with 77% describing themselves as under-resourced. According to David Baggett, SVP and General Manager of Security Suite at Kaseya, \"People aren't perfect, and everyone knows it,\" emphasizing the persistent nature of human error in cybersecurity.\n\nTo achieve true cyber resilience, Baggett suggests that organizations must factor in human error and poor practices. Rather than aiming to eliminate mistakes, the focus should be on building an organization that can withstand these challenges. \"The path to true cyber resilience isn't about eliminating mistakes. It's about building an organization that can withstand them. Expect mistakes, account for constraints, and engineer around them.\" Kaseya advocates for the development of security systems and practices capable of withstanding human errors.",
  "summary": "Security professionals state that their colleagues are the biggest challenge that they face, with human error named as the most significant attack vector",
  "key_points": [
    "Human error identified as top cybersecurity threat by 68% of IT professionals",
    "User practices and lack of training contribute to 80% of security incidents",
    "Only 20% of IT departments see budgets growing with increasing risks"
  ],
  "editors_take": "The persistent gap between rising human error risks and stagnant security budgets forces organizations to shift their focus from preventing mistakes to engineering systems that can withstand inevitable user errors.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}