Hackers are increasingly targeting humans to bypass cybersecurity defences

A new report reveals that threat actors are circumventing traditional security defences by exploiting human vulnerabilities, with help desks becoming a primary target. The report from Scoop News Group and Proofpoint argues that sophisticated social engineering, rather than technical exploits, is now the dominant threat vector. Attackers are using information from data breaches and social media to create convincing impersonations, directly targeting employees to gain access to sensitive systems and data.

According to the findings, traditional verification methods, such as using a mother's maiden name, are dangerously obsolete due to the widespread availability of personal information online. The report warns that most employees, including specialised help desk staff, are not adequately equipped to identify and block these impersonation attempts. It recommends that organisations adopt a "human-centric" defence strategy that complements technical measures. This includes providing specialised training for at-risk staff and re-evaluating identity verification processes to defend against deepfakes and social engineering.