InfoSecBulletin Cybersecurity for mankind
Living Security, a leader in Human Risk Management, has published the 2025 State of Human Cyber Risk Report, an independent study by Cyentia Institute. The report examines behavioral risks in organizations and shows that strategic HRM programs can reduce these risks 60% faster than traditional approaches.
A study of over 100 companies and millions of user events reveals where cyber risks exist in the workforce and how top firms are reducing them. It shows that just 10% of employees account for 73% of risky behavior. The report emphasizes that in 2025, protecting an organization will focus more on managing people than systems.
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
CISA, NSA and NIST Publish New 10 AI Agent Control Guidelines
Claude AI Cracks 25-Year NSA Cryptography Number Mystery in Just 30 Minutes
“Security teams have always known the human factor plays a critical role in breaches, but they’ve lacked the visibility to act on it,” said Ashley Rose, CEO and Co-founder of Living Security. “Until now, most insights have relied on anecdotal evidence or narrow indicators like phishing clicks. This report changes that by providing hard data that shows exactly where risk lives, and what actually works to reduce it.”
Key Findings from the Report:
Human risk is concentrated, not widespread: Just 10% of employees are responsible for nearly three-quarters (73%) of all risky behavior.
Visibility is alarmingly low: Organizations relying solely on security awareness training (SAT) have visibility into only 12% of risky behavior, compared to 5X that for mature HRM programs.
Risk is often misidentified: Contrary to popular belief, remote and part-time workers are less risky than their in-office peers.
HRM works: Companies using Living Security’s Unify platform cut their risky user population by 50% and reduced high-risk behavior duration by 60%.
From Awareness to Action: Making Human Risk Measurable
Unlike traditional reports that look at outside threats or compliance checks, the 2025 State of Human Cyber Risk Report focuses on internal risk behaviors and how they can improve with effective solutions.
With budgets tightening and threats evolving, the stakes are clear: cybersecurity can no longer rely on awareness alone. Leaders must prioritize behavioral visibility, targeted action, and ROI-driven results.
“Cybersecurity is no longer just about technology, it’s about behavior,” said Rose. “If we don’t understand who our riskiest users are, why they’re at risk, and how to help them improve, we’ll continue chasing symptoms instead of solving the root problem.”
Looking Ahead
AI agents and digital co-workers are rapidly entering the enterprise, changing the landscape of risk management. Living Security, a leader in Human Risk Management, focuses on managing behavioral risk, not just human risk. This report highlights progress in human risk and points to a future where businesses ensure shared visibility, standards, and accountability for both humans and AI.
About the Report
The 2025 State of Human Cyber Risk Report was created in collaboration with the Cyentia Institute and uses anonymized data from Living Security’s Unify platform. It analyzes hundreds of millions of user events to illustrate human risk and offers ways to minimize it.
