State of the Phish 2022: An in depth exploration of user awareness, vulnerability and resilience

Last year, we titled our introduction “A Year Like No Other.” We could easily have repeated that heading to describe 2021. The year has left many organisations contemplating what “normal” will mean for their workforces going forward. Along with hybrid and remote work options, organisations are mulling the best ways to keep employees connected and collaborative. Studies show the ongoing pandemic has had a major impact on workers’ mental health. Employees are feeling burnt out, emotionally drained and distracted.

Meanwhile, cyber attackers are as adept as ever. And they continue to use tactics and lures that resonate with employees and consumers alike.In this, our eighth annual State of the Phish report, we explore user vulnerabilities from multiple angles. We look at issues driven by poor cyber hygiene and those that could result from a lack of knowledge and clear communication. We discuss ways organisations can become more attuned to their risks. And we outline opportunities to build and sustain engaging security awareness training initiatives in this challenging climate.