How hackers exploit our vulnerabilities

Issue 7 2023 Information Security, Security Services & Risk Management


Anna Collard.

Human error is responsible for a massive 95% of cybersecurity issues worldwide. Mistakes made by people are the primary cause of these problems. In South Africa, a recent Sophos report revealed that exploited vulnerabilities were the leading cause of cyberattacks for organisations in 2023, closely followed by compromised credentials. In the past year, the average cost incurred by South African companies as a result of cybersecurity breaches is a staggering R14 million ($750 000). It does not stop there. South Africans also face higher rates of depression and anxiety compared to other countries, in addition to getting less sleep on average.

With this combination of factors, it is no wonder that distracted, tired, and stressed South Africans often find themselves clicking on the wrong links and unknowingly introduce security risks.

Hacking humans

Bad actors target individuals because they are more vulnerable to hacking compared to advanced security technology. This practice, commonly known as the science of hacking humans, involves using deception and manipulation as common methods of social engineering. These tactics serve as the primary means of initiating attacks. In fact, in 2022, 74% of all data breaches included a human element.

While it may not be possible to completely eliminate stress and sleep deprivation, there are ways to mitigate their impact and protect against psychological attacks. Investing in tools and adopting specific approaches can make a significant difference. The first and most important of these is to foster critical thinking and cultivate skills that enhance situational and self-awareness. These skills are set to become even more vital as the world transitions into the metaverse and artificial intelligence (AI) tools become increasingly prevalent.

Know the warning signs

One of the core considerations for users is to pay attention. Multitasking is a myth. In fact, it is actually detrimental to individuals as it leads to human error, impairs long-term memory, and diminishes the ability to stay focused and creative. Moreover, multitasking increases the likelihood of behaving inappropriately and is often the cause of security mistakes. For instance, talking on the phone while reading emails? You’re not paying attention and could inadvertently click on the wrong link.

Another risk is emotions. Hackers heavily exploit this vulnerability through phishing emails and scams, crafting their content to trigger the amygdala and elicit a fight-or-flight response. The amygdala bypasses critical thinking and is the root cause of potentially dangerous decision-making. It is also the reason why fake news is more likely to be reshared, as it directly taps into people’s emotions.

The power of mindfulness

Combine distraction and emotion with speed, and you have a potent cocktail for hackers. Human beings tend to make quick decisions, and if they are not mindful of their reasoning, they may click on a phishing email, open an attachment, or share sensitive information. That is why many attacks employ tactics that create a sense of urgency, urging people to take immediate action, and unfortunately, people often comply.

Mindfulness serves as a powerful tool in managing immediate and emotional responses, reducing the risk of being distracted. When individuals practice mindfulness, they are less prone to making mistakes, pay closer attention to their tasks, and, as a bonus, experience less stress. By approaching work mindfully, individuals are less likely to fall victim to attacks. If organisations incorporate mindfulness into their training programmes, individuals become more aware of potential threats and are less likely to be caught off guard.

One way to incorporate this, is via mindful moments, allowing people to end meetings five minutes earlier to take time to decompress and use breathwork or movement and focus on the present moment before starting the next task. A mindful organisational culture enables people to slow down, focus, and effectively manage their reactions. This not only minimises risks but also helps people get more done, and be more productive and happier.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Phishing attacks through SVG image files
Kaspersky News & Events Information Security
Kaspersky has detected a new trend: attackers are distributing phishing emails to individual and corporate users with attachments in SVG (Scalable Vector Graphics) files, a format commonly used for storing images.

Read more...
Crypto in SA: between progress and precaution
Information Security
“As cryptocurrency gains momentum and legitimacy, it’s becoming increasingly important for people to pay attention to financial security”, says Richard Frost, head of technology and innovation at Armata Cyber Security.

Read more...
Cyber recovery requires a different approach to disaster recovery
Information Security
Disaster recovery is about getting operations back on track after unexpected disruptions; cyber recovery, however, is about calculated actions by bad actors aiming to disrupt your business, steal sensitive data, or hold your system hostage.

Read more...
MDR users claim 97,5% less
Sophos Information Security
The average cyber insurance claim following a significant cyberattack is just $75 000 for MDR users, compared with $3 million for endpoint-only users, according to a new independent study.

Read more...
The impact of GenAI on cybersecurity
Sophos News & Events Information Security
Sophos survey finds that 89% of IT leaders worry GenAI flaws could negatively impact their organisation’s cybersecurity strategies, with 87% of respondents stating they were concerned about a resulting lack of cybersecurity accountability.

Read more...
Rewriting the rules of reputation
Technews Publishing Editor's Choice Security Services & Risk Management
Public Relations is more crucial than ever in the generative AI and LLMs age. AI-driven search engines no longer just scan social media or reviews, they prioritise authoritative, editorial content.

Read more...
How can South African organisations fast-track their AI initiatives?
AI & Data Analytics Security Services & Risk Management
While the AI market in South Africa is anticipated to grow by nearly 30% annually over the next five years, tapping into the promise and potential of AI is not easy.

Read more...
Efficient, future-proof estate security and management
Technews Publishing ElementC Solutions Duxbury Networking Fang Fences & Guards Secutel Technologies OneSpace Technologies DeepAlert SMART Security Solutions Editor's Choice Information Security Security Services & Risk Management Residential Estate (Industry) AI & Data Analytics IoT & Automation
In February this year, SMART Security Solutions travelled to Cape Town to experience the unbelievable experience of a city where potholes are fixed, and traffic lights work; and to host the Cape Town SMART Estate Security Conference 2025.

Read more...
Kaspersky KATA 7.0 for targeted attack protection
Information Security Products & Solutions
] Kaspersky has announced a major update to its Kaspersky Anti Targeted Attack (KATA) including enhanced network detection and response (NDR) capabilities with deeper network visibility, internal threats detection and other critical security features.

Read more...