2024 State of the phish report
Risky actions, real-world threats and user resilience in an age of human-centric cybersecurity


Cybercriminals don’t even have to try hard to hack into an organization. According to this year’s State of the Phish survey, 71% of working adults admitted to taking a risky action, such as reusing or sharing a password.
This report shares insights from a survey that studied the behaviors of 7,500 end users and 1,050 security professionals across 15 countries. Insights were derived from 183 million simulated phishing messages sent by customers over 12 months.
Here’s what you’ll learn:
- Gaps in security awareness training programs.
- The threat landscape in Europe and the Middle East.
- Recommendations that alleviate risks.
Download now
Provided by Proofpoint
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
ITPro is a global business technology website providing the latest news, analysis, and business insight for IT decision-makers. Whether it's cyber security, cloud computing, IT infrastructure, or business strategy, we aim to equip leaders with the data they need to make informed IT investments.
For regular updates delivered to your inbox and social feeds, be sure to sign up to our daily newsletter and follow on us LinkedIn and Twitter.
-
How to implement a four-day week in tech
In-depth More companies are switching to a four-day week as they look to balance employee well-being with productivity
-
Intelligence sharing: The boost for businesses
In-depth Intelligence sharing with peers is essential if critical sectors are to be protected
-
Hackers breached a 158 year old company by guessing an employee password – experts say it’s a ‘pertinent reminder’ of the devastating impact of cyber crime
News A Panorama documentary exposed hackers' techniques and talked to the teams trying to tackle them
-
Everything we know about the Allianz Life data breach so far
News The company has confirmed in a filing that data was accessed earlier this month
-
Average Brit hit by five data breaches since 2004
News While the number of breaches has fallen, the UK has been the worst-hit country in Northern Europe since 2004
-
ExpressVPN updates Windows app to fix vulnerability
News The flaw was reported through ExpressVPN's bug bounty program
-
NCSC says ‘limited number’ of UK firms affected by SharePoint attack as global impact spreads
News The SharePoint flaw has already had a wide impact according to reports from government security agencies
-
New hires are your weakest link when it comes to phishing attacks – here's how you can build a strong security culture that doesn't judge victims
News Research from Keepnet shows new hires are far more likely to fall for phishing attacks – here's how you can improve security awareness during onboarding processes.
-
IT leaders are facing major work device blind spots – and it's putting security at risk
News The use of unauthorized devices is putting enterprises at huge risk
-
Okta and Palo Alto Networks are teaming up to ‘fight AI with AI’
News The expanded partnership aims to help shore up identity security as attackers increasingly target user credentials