Gap Between Cyber Attack Causes, Public Perception Widening

New research highlights critical misalignment in understanding cyberattack vectors, urging a reevaluation of security priorities.

12/31/2024

The public and media are misaligned with actual cybersecurity risks, leaving organizations exposed to the most common and effective cyber attack methods, according to a new study from Hive Systems. The research, which uses data from the 2024 Verizon DBIR, leading media outlets, and public search trends, highlights critical perception gaps:

System Intrusion, while accounting for only 16% of incidents, receives overwhelming media coverage, including 68% in The Guardian and 39% of Google search trends.
Social Engineering, responsible for 26% of breaches, is vastly underrepresented, with only 4% coverage in The Guardian and 14% in citation statements.
Basic Web Application Attacks, making up 8% of breaches, are virtually ignored in major media outlets and public discourse, with 0% coverage in The New York Times and minimal search interest (1%).

Cyber Attack, cybersecurity risks — *(Image: Adobe Stock / By Photocreo Bednarek)*

“This data paints a concerning picture of misplaced focus,” said Alex Nette, CEO and Co-Founder of Hive Systems. “Organizations are often influenced by media narratives and search trends that spotlight sensational breaches, while the most prevalent and preventable threats fly under the radar. This misalignment results in resource misallocation and unnecessary vulnerabilities.”

The Cost Of Misperception

The study underscores the dangers of misinformed cybersecurity priorities. With media and public attention disproportionately focused on complex attacks, simpler but more common vectors, like social engineering and web application vulnerabilities, remain neglected. This leaves businesses and individuals exposed to risks that could otherwise be mitigated.

Hive Systems urges organizations to realign their cybersecurity strategies with the actual threat landscape: Education and awareness can only go so far, and data driven peer risk benchmarks are needed to help close the perception gap and fortify companies against the most impactful threats.