Report by Dune
CISOs on the Emerging Threats Redefining User Cyber Risk
Key Findings
59% of CISOs at enterprises fear voice phishing (vishing).
0% of surveyed enterprises simulate threats in encrypted messaging apps.
Only 27% of CISOs at enterprises simulate SMS phishing.
64% of enterprises faced off-channel attacks in the past year.
Concern for attacks coming from collaboration tools and encrypted messaging is 38% at enterprises.
71% of CISOs at enterprises worry about SMS phishing (smishing).
Just 15% of CISOs at enterprises test voice phishing.
Only 12% of CISOs at enterprises believe their current Security Awareness Training (SAT) program is sufficient.
64% of surveyed enterprises confirmed social engineering attacks via encrypted or informal channels in the past 12 months.
Testing for collaboration tools and encrypted messaging plummets to single digits or zero at enterprises.
91% of enterprises say tailoring phishing simulations by both role and behavior is essential.
Just 18% of enterprises tailor phishing simulations by both role and behavior.
Only 15% of enterprises simulate vishing.
Only 27% of enterprises test smishing.
100% of enterprises test email phishing.
AI-personalized phishing now drives 300% more user interaction than traditional, templated variants.