The RSA conference in San Francisco highlighted the security industry's focus on new solutions for new problems, while foundational issues remain unsolved. The 2024 Verizon Data Breach Investigations Report (DBIR) found that human error and victimization in phishing attacks are the leading causes of breaches. Weak and stolen credentials continue to be the primary method of attack, despite being solvable through password managers, SSO, MFA, and passkeys. Only 29% of respondents in 1Password's 2022 State of Access Report used a password manager at work. The DBIR authors suggest that two-thirds of breaches could be addressed by properly training and equipping employees. However, talks on employee training and credential management at RSAC were less popular than discussions on emerging threats like AI deepfakes. The 2024 DBIR provides insights into where the security industry is falling short and how to move forward. The full blog offers more insights about the report and its implications for security.
1password.com
1password.com
Create attached notes ...