In reality, we know much less about cybersecurity than we think and need
It is easy to think that by using computers and the Internet on a daily basis, we believe that we know enough about cybersecurity not to fall for phishing scams and others... But in reality, a study affirms that we know less than we should about cybersecurity and we overestimate our knowledge about it.
This statement comes from a survey of 12.500 users of the Security Awareness Platform of Kaspersky, formed between January and April 2022. The report suggests that our cybersecurity knowledge is much worse than we thinkyes And therefore we are susceptible to attacks.
We don't really know that much about cybersecurity
According to the report, 90% of employees overestimate their knowledge of cybersecurity fundamentals. “Improper use” of IT resources remains the most common mistake. Other common cybersecurity mistakes include:
- 83% don't know what card details should not be sent via email
- 73% don't know how to check all the signs that someone has accessed their account
- 70% don't know what to do if a newly purchased app on the Google Play store suddenly asks for their Gmail password.
- 51% don't know what to do if an acquaintance asks for their computer credentials while on a business trip
When it comes to sensitive company data, we are extra vigilant. 99%rcorrectly answered the questions about the protection of this type of data. Experts say that sending information by email and entering passwords are part of our daily routine, and while they are not a problem in themselves, trusting us can be costly for a company. Cybercriminals are still using old methods, such as brute force phishing.
Most corporate systems today are well-protected and heavily defended with firewalls, strict password policies, antivirus, and malware protection services. But the employees themselves remain the weakest link. That is why they remember that it is essential that all employees adopt cybersecurity practices, such as generating strong passwords, never sharing them, updating them frequently, activating two-factor authentication, and connecting to corporate networks through VPN.
Source: TechRadar