While enterprises place a huge emphasis on educating workers to look out for phishing scams , the worst offenders when it comes to clicking malicious links are actually security leaders themselves.

That’s according to new research from Arctic Wolf , which found that despite three-quarters of IT and security leaders believing their organization wouldn’t fall for a phishing attack, nearly two-thirds click phishing links.

Notably, one-in-five failed to report falling for a malicious link or phishing email.

Adam Marrè, senior vice president and chief information security officer (CISO) at Arctic Wolf, said the study highlights a major blind spot and degree of hubris among some security leaders.

"When leaders are overconfident in their defenses while overlooking how employees actu

See Full Page