• 0110010001100010@lemmy.world
    link
    fedilink
    English
    arrow-up
    11
    ·
    10 months ago

    While true, I’m not convinced that fully explains it. Having been in IT nearly 2 decades I feel like the second piece is cybersecurity budgets getting slashed. A lot of them have been super-basic shit like someone clicking on a malicious link.

    • CaptainSpaceman@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      10 months ago

      Oh for sure, didnt mean to imply it was the only reason.

      Spearphishing high-value targets, or even just phishing a company’s email roster are very very common practices because they yield significant results.

      Theres also the “insurance approach” to cybersecurity, where its cheaper to run PR for a little while and/or take out insurance policies against cyber attacks such as ransomware. The latter is a key factor as to why many companies dont mind paying the ransom at all.