Verizon published the 2026 Data Breach Investigations Report this week. The human element is still the leading cause of breaches. It was 61% the year before. It was 60% the year before that. Despite billions spent on security awareness training the number has not moved in any meaningful direction. This is worth sitting with. Not because training is useless but because the problem we have been trying to solve with training is not the same problem that is actually causing the breaches. The Stryker attack involved no phishing. The Kali365 platform succeeds after MFA has already been passed. Something in the framing needs to change.
