How hackers exploit our vulnerabilities

Issue 7 2023 Information Security, Security Services & Risk Management


Anna Collard.

Human error is responsible for a massive 95% of cybersecurity issues worldwide. Mistakes made by people are the primary cause of these problems. In South Africa, a recent Sophos report revealed that exploited vulnerabilities were the leading cause of cyberattacks for organisations in 2023, closely followed by compromised credentials. In the past year, the average cost incurred by South African companies as a result of cybersecurity breaches is a staggering R14 million ($750 000). It does not stop there. South Africans also face higher rates of depression and anxiety compared to other countries, in addition to getting less sleep on average.

With this combination of factors, it is no wonder that distracted, tired, and stressed South Africans often find themselves clicking on the wrong links and unknowingly introduce security risks.

Hacking humans

Bad actors target individuals because they are more vulnerable to hacking compared to advanced security technology. This practice, commonly known as the science of hacking humans, involves using deception and manipulation as common methods of social engineering. These tactics serve as the primary means of initiating attacks. In fact, in 2022, 74% of all data breaches included a human element.

While it may not be possible to completely eliminate stress and sleep deprivation, there are ways to mitigate their impact and protect against psychological attacks. Investing in tools and adopting specific approaches can make a significant difference. The first and most important of these is to foster critical thinking and cultivate skills that enhance situational and self-awareness. These skills are set to become even more vital as the world transitions into the metaverse and artificial intelligence (AI) tools become increasingly prevalent.

Know the warning signs

One of the core considerations for users is to pay attention. Multitasking is a myth. In fact, it is actually detrimental to individuals as it leads to human error, impairs long-term memory, and diminishes the ability to stay focused and creative. Moreover, multitasking increases the likelihood of behaving inappropriately and is often the cause of security mistakes. For instance, talking on the phone while reading emails? You’re not paying attention and could inadvertently click on the wrong link.

Another risk is emotions. Hackers heavily exploit this vulnerability through phishing emails and scams, crafting their content to trigger the amygdala and elicit a fight-or-flight response. The amygdala bypasses critical thinking and is the root cause of potentially dangerous decision-making. It is also the reason why fake news is more likely to be reshared, as it directly taps into people’s emotions.

The power of mindfulness

Combine distraction and emotion with speed, and you have a potent cocktail for hackers. Human beings tend to make quick decisions, and if they are not mindful of their reasoning, they may click on a phishing email, open an attachment, or share sensitive information. That is why many attacks employ tactics that create a sense of urgency, urging people to take immediate action, and unfortunately, people often comply.

Mindfulness serves as a powerful tool in managing immediate and emotional responses, reducing the risk of being distracted. When individuals practice mindfulness, they are less prone to making mistakes, pay closer attention to their tasks, and, as a bonus, experience less stress. By approaching work mindfully, individuals are less likely to fall victim to attacks. If organisations incorporate mindfulness into their training programmes, individuals become more aware of potential threats and are less likely to be caught off guard.

One way to incorporate this, is via mindful moments, allowing people to end meetings five minutes earlier to take time to decompress and use breathwork or movement and focus on the present moment before starting the next task. A mindful organisational culture enables people to slow down, focus, and effectively manage their reactions. This not only minimises risks but also helps people get more done, and be more productive and happier.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Banking’s AI reckoning
Commercial (Industry) Surveillance Access Control & Identity Management Fire & Safety Perimeter Security, Alarms & Intruder Detection Information Security Asset Management News & Events Integrated Solutions Infrastructure Security Services & Risk Management Education (Industry) Entertainment and Hospitality (Industry) Financial (Industry) Healthcare (Industry) Industrial (Industry) Mining (Industry) Residential Estate (Industry) Retail (Industry) Transport (Industry) Conferences & Events Products & Solutions Associations Videos Training & Education Smart Home Automation Agriculture (Industry) Logistics (Industry) AI & Data Analytics Facilities & Building Management IoT & Automation Power Management
From agentic commerce disputes to quantum-powered risk modelling, SAS experts offer a ‘banker’s dozen,’ 13 industry-defining predictions that will separate institutions that master intelligent banking from those still struggling with the basics.

Read more...
Axis signs CISA Secure by Design pledge
Axis Communications SA News & Events Surveillance Information Security
Axis Communications has signed the United States Cybersecurity & Infrastructure Security Agency’s (CISA) Secure by Design pledge, signalling the company’s commitment to upholding and transparently communicating the cybersecurity posture of its products.

Read more...
Eight African cybersecurity trends for 2026
Information Security
Check Point Software Technologies has released eight critical trends shaping Africa’s digital turning point in 2026, noting that their implementation will require the government, the private sector, and key civic institutions to cooperate.

Read more...
The year of the agent
Information Security AI & Data Analytics
The dominant attack patterns in Q4 2025 included system-prompt extraction attempts, subtle content-safety bypasses, and exploratory probing. Indirect attacks required fewer attempts than direct injections, making untrusted external sources a primary risk vector heading into 2026.

Read more...
AI cybersecurity predictions for 2026
AI & Data Analytics Information Security
The rapid development of AI is reshaping the cybersecurity landscape in 2026, for both individual users and businesses. Large language models (LLMs) are influencing defensive capabilities while simultaneously expanding opportunities for threat actors.

Read more...
SMARTpod Talks to Check Point Technologies about the African Perspectives on Cybersecurity report
SMART Security Solutions News & Events Information Security Videos
SMART Security Solutions spoke with Check Point's Hendrik de Bruin about the report, the risks African organisations face, and some mitigation measures.

Read more...
SA availability of immutable backup storage appliance
CASA Software Infrastructure Security Services & Risk Management
CASA Software has launched the newly released Nexsan VHR-Series, a fully integrated, enterprise-class, immutable backup storage appliance purpose-built for Veeam software environments, with usable capacity ranging from 64 TB to 3,3 PB.

Read more...
Beagle Watch named best security company in Johannesburg
News & Events Security Services & Risk Management
Beagle Watch Armed Response has been named Johannesburg’s Best Security Company in the 2025 Best of Joburg Awards, surpassing about 26 nominated private security firms in the greater Johannesburg region, thanks to overwhelming public support.

Read more...
Securing the smart fleet
Information Security Transport (Industry) Logistics (Industry) IoT & Automation
Contributing around 10 to 12% of South Africa’s GDP, the transport and logistics sector supports almost every part of the country’s economic activity. The stakes for keeping these systems secure are higher than ever before.

Read more...
Who are you?
Access Control & Identity Management Information Security
Who are you? This question may seem strange, but it can only be answered accurately by implementing an Identity and Access Management (IAM) system, a crucial component of any company’s security strategy.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.