DarkWebGuide
The Human Problem

What Is 90% Of Cyber Attacks?

You might think hackers are the biggest threat to your company's security. You'd be wrong. It's your own employees.

Approximately 90% of cyber attacks involve human error - most commonly falling for phishing emails, clicking malicious links, or using weak passwords. People are the weakest link in security.

If you want to know why cybersecurity is so hard, look in the mirror. The biggest vulnerability in any system is the person using it.

Here's what 90% of cyber attacks actually are.

Illustration showing human factors in cyber attacks
Human error involved90% of attacks
Most common vectorPhishing
Second most commonWeak passwords
ThirdMisconfigurations
Last reviewed2026-07-01
Reading time3 min read
DifficultyIntermediate
EvidenceStrong
Human error90% of attacks
Common vectorPhishing
Weakest linkPeople
SolutionTraining + technology

The Human Factor

Why The Weakest Link Is Always The Person

Here's the thing about cyber attacks: they target people, not computers. Hackers know that it's easier to trick someone into clicking a link than to break through a firewall.

Phishing emails are the most common attack vector. A well-crafted email that looks legitimate can fool even careful users. One click, and the attacker is inside your network.

Here's a joke: why do hackers love people? Because people are easy. They click on things they shouldn't, reuse passwords, and generally make life simple for anyone trying to break in.

Wait...what? Phishing Is Responsible For Most Attacks

Approximately 90% of successful cyber attacks start with a phishing email. Hackers don't break in - they're let in.

This means the most effective security is training people to recognize phishing attempts.

Why Do People Fall For Phishing?

Why do smart people click on phishing emails?

Because hackers exploit basic human psychology: urgency, fear, curiosity, and trust. A well-crafted phishing email looks legitimate and creates a reason to click immediately.

What The Data Shows

Based on cybersecurity breach analysis:

Strong supportSupports the main answer

90% of successful attacks involve human error

Drawn from security research.
Strong supportSupports the main answer

Phishing is the most common attack vector

Drawn from security research.
Strong supportSupports the main answer

Weak passwords are a major factor

Drawn from security research.
Strong supportSupports the main answer

Technical measures alone are insufficient

Drawn from security research.
confirmed

So, What Is 90% Of Cyber Attacks?

Human error - people clicking things they shouldn't, using weak passwords, and making mistakes.

The biggest cybersecurity threat isn't technology - it's people. And people can be trained to be more careful.

Questions people ask

You now know

  • 90% of cyber attacks involve human error.
  • Phishing is the most common attack vector.
  • People are the weakest link in cybersecurity.
  • Training and awareness are essential to reducing risk.

Sources

Further reading

  • Cybersecurity breach analysis reports
  • Industry research on attack vectors

Continue learning

Next useful step

What Makes the Dark Web Dangerous?phishingWhat Do Hackers Hate the Most? Defenses That Actually WorkwhatCan You Get Hacked on the Dark Web? Identify the Actual AttackphishingWhich Country Uses the Most Dark Web? What Tor Statistics Can Saystatistics

Keep going

The next door is usually the interesting one

The answer you came for touches a few neighboring questions. These are the ones most likely to make the picture click.

What you should remember

The useful version

  • 90% of cyber attacks involve human error.
  • Phishing is the most common attack vector.
  • People are the weakest link in cybersecurity.
  • Training and awareness are essential to reducing risk.

A few useful next steps

what

What Do Hackers Hate the Most? Defenses That Actually Work

How to protect yourself.

6 min readwhat

What Makes the Dark Web Dangerous?

The dark web is not dangerous because it contains a completely different class of internet threat. Many of its risks, including scams, phishing, malware and fraudulent identities, also exist on the ordinary web.

6 min readcan

Can You Get Hacked on the Dark Web? Identify the Actual Attack

6 min readwhat

What Percent Of The Dark Web Is Illegal?

Depends heavily on how you measure it, active sites versus total traffic tell noticeably different stories, and the honest answer sits somewhere more nuanced than either 'mostly criminals' or 'mostly legitimate' would suggest.

6 min read

Where this question wanders next

The dark web is less a single tunnel than a set of side passages. These are the useful ones from here.

You are hereWhat Is 90% Of Cyber Attacks?
Nearby ideacyber attacksA nearby idea in this guide.
Open nextstatisticsWhich Country Uses the Most Dark Web? What Tor Statistics Can Say
Nearby ideahuman errorA nearby idea in this guide.
Open nextWhat Makes the Dark Web Dangerous?The dark web is not dangerous because it contains a completely different class of internet threat. Many of its risks, including scams, phishing, malware and fraudulent identities, also exist on the ordinary web.Open nextCan You Get Hacked on the Dark Web? Identify the Actual AttackOpen nextWhat Percent Of The Dark Web Is Illegal?Depends heavily on how you measure it, active sites versus total traffic tell noticeably different stories, and the honest answer sits somewhere more nuanced than either 'mostly criminals' or 'mostly legitimate' would suggest.Open nextWhat Is the Safest Dark Web Site? Verify a Publisher Instead of Trusting a Ranking

If this made you wonder

what

What Makes the Dark Web Dangerous?

If you wanted the simple version

6 min readcan

Can You Get Hacked on the Dark Web? Identify the Actual Attack

If you wanted the safety angle

6 min readwhat

Deep Web vs Dark Web: What Is the Difference?

If you wanted the comparison angle

6 min readwhy

Why Hasn’t the Dark Web Been Shut Down? What Takedowns Actually Change

If you wanted the deeper explanation

6 min read

cyber attacks collection

what

What Makes the Dark Web Dangerous?

The dark web is not dangerous because it contains a completely different class of internet threat. Many of its risks, including scams, phishing, malware and fraudulent identities, also exist on the ordinary web.

6 min readcan

Can You Get Hacked on the Dark Web? Identify the Actual Attack

6 min readwhich

Which Country Uses the Most Dark Web? What Tor Statistics Can Say

6 min read

Check the evidence

1

What Makes the Dark Web Dangerous?

The dark web is not dangerous because it contains a completely different class of internet threat. Many of its risks, including scams, phishing, malware and fraudulent identities, also exist on the ordinary web.

2

What Percent Of The Dark Web Is Illegal?

Depends heavily on how you measure it, active sites versus total traffic tell noticeably different stories, and the honest answer sits somewhere more nuanced than either 'mostly criminals' or 'mostly legitimate' would suggest.

3

What Is the Safest Dark Web Site? Verify a Publisher Instead of Trusting a Ranking

4

What Are Tor Exit Node Risks?

Tor is built from layers of encryption peeled off one relay at a time. At the very last layer, something interesting — and slightly less reassuring — happens.

5

What Is the 5 Levels of the Internet Meme, and Is It Accurate?

A tidy pyramid diagram has convinced millions the internet has secret basement levels. Here's what's actually true.

Questions people ask first

what

What Do Hackers Hate the Most? Defenses That Actually Work

How to protect yourself.

what

What Makes the Dark Web Dangerous?

The dark web is not dangerous because it contains a completely different class of internet threat. Many of its risks, including scams, phishing, malware and fraudulent identities, also exist on the ordinary web.

can

Can You Get Hacked on the Dark Web? Identify the Actual Attack

what

What Percent Of The Dark Web Is Illegal?

Depends heavily on how you measure it, active sites versus total traffic tell noticeably different stories, and the honest answer sits somewhere more nuanced than either 'mostly criminals' or 'mostly legitimate' would suggest.

which

Which Country Uses the Most Dark Web? What Tor Statistics Can Say

what

What Is the Safest Dark Web Site? Verify a Publisher Instead of Trusting a Ranking

Choose by the time in your pocket

5 min

15 min

30 min