Advanced Security Isn't Stopping Ancient Phishing Tactics

A recent study highlights the ongoing threat of phishing attacks, revealing that even organizations with advanced security measures are vulnerable. Conducted by Okta, the research analyzed failed phishing-resistant authentication attempts over 26 months, showing that traditional security layers like email gateways and training programs are insufficient. Key findings include that American organizations are the most targeted, with Office 365 being the primary application for attacks.

The study emphasizes the need for better phishing-resistant authentication, as only 40% of users employ it regularly. Despite awareness and training, phishing persists due to its accessibility and the limited adoption of effective safeguards. The research also noted successful cross-organization security collaboration as a positive outcome, suggesting that sharing information can enhance defenses against phishing.