Human error is now the primary factor in data breaches, accounting for 95% of incidents in 2024. This is often exploited through social engineering tactics like phishing, where employees overestimate their ability to detect scams, with nearly 50% admitting to falling for them. Threat actors, such as Blind Eagle and those behind the KoSpy spyware, utilize phishing emails to gain initial access to systems. While email remains a common threat, attacks via collaboration tools are also increasing. Organizations face challenges in addressing these risks due to budget constraints and the need for more effective human risk management programs beyond basic security awareness training. Simultaneously, threats are becoming more sophisticated with the use of AI in phishing attacks and deepfakes, although AI is also being leveraged in cyber defense.