Survey: 39 Percent of IT Professionals Say Phishing is the Most Feared Cyberattack

Axiad, a provider of organization-wide passwordless orchestration, today announced the results of its 2023 State of Authentication Survey. The survey investigated the types of cyberattacks respondents were most afraid of and prepared for, how their organizations held up against password-based attacks, if and why companies are still using passwords, and what cybersecurity technologies companies plan to use in 2024.

The survey, which was conducted in October 2023, collected more than 200 responses from U.S. information technology (IT) professionals, including hardware and software, across a variety of industry verticals, including financial, government, retail, manufacturing, healthcare, education, telecommunications and more.

Key findings from the survey revealed:

  • 39% indicated phishing is the most feared cyberattack, while 49% said it is the attack most likely to happen.
  • 88% felt their company was prepared to defend against a password-based cyberattack, yet 52% said their business has fallen victim to one within the last year.
  • Despite password woes, 93% of respondents are still using passwords for business, citing that the biggest reasons they still use them are fear of change (64%), the potential need to rip and replace technology (54%), time constraints (51%) and lack of staff (25%).
  • When asked whose fault they think exploited passwords are, respondents' answers varied: IT staff (35%), end users (32%), security teams (25%) and leadership (8%).
  • When asked what technologies respondents will use over the next year, 45% said they will use passwordless technology, and 27% said they will use phishing-resistant multi-factor authentication (MFA).
  • When asked which recent guidance has most impacted their organization's authentication strategy, the Cybersecurity and Infrastructure Security Agency (CISA) came out on top (41%), followed by the National Institute of Standards and Technology (NIST) (26%) and the White House Office of Management and Budget (OMB) (13%).

"Generative AI has significantly lowered the entry barrier for cybercriminals to craft highly effective phishing emails, and when you combine that with poor password management, it's no surprise that the volume of successful phishing and password-based attacks continues to skyrocket," said Bassam Al-Khalidi, co-founder and co-CEO of Axiad. "The survey results are alarming because, despite the rising number of these cyberattacks, most companies are still stuck in the status quo of using passwords as their primary method of authentication. Fear of change is no excuse. Organizations need to act now to combat advanced cybercriminals, or they will continue to be at risk. In today's threat landscape, the most effective thing they can do to bolster their cybersecurity posture is implement passwordless authentication and phishing-resistant MFA."

For more data points from the survey, download the State of Authentication Survey report.


  • Maximizing Your Security Budget This Year

    Perimeter Security Standards for Multi-Site Businesses

    When you run or own a business that has multiple locations, it is important to set clear perimeter security standards. By doing this, it allows you to assess and mitigate any potential threats or risks at each site or location efficiently and effectively. Read Now

  • Getting in Someone’s Face

    There was a time, not so long ago, when the tradeshow industry must have thought COVID-19 might wipe out face-to-face meetings. It sure seemed that way about three years ago. Read Now

    • Industry Events
    • ISC West
  • Live From ISC West 2024: Post-Show Recap

    ISC West 2024 is complete. And from start to finish, the entire conference was a huge success with almost 30,000 people in attendance. Read Now

    • Industry Events
    • ISC West
  • ISC West 2024 is a Rousing Success

    The 2024 ISC West security tradeshow marked a pivotal moment in the industry, showcasing cutting-edge technology and innovative solutions to address evolving security challenges. Exhibitors left the event with a profound sense of satisfaction, as they witnessed a high level of engagement from attendees and forged valuable connections with potential clients and partners. Read Now

    • Industry Events
    • ISC West

Featured Cybersecurity


New Products

  • ComNet CNGE6FX2TX4PoE

    The ComNet cost-efficient CNGE6FX2TX4PoE is a six-port switch that offers four Gbps TX ports that support the IEEE802.3at standard and provide up to 30 watts of PoE to PDs. It also has a dedicated FX/TX combination port as well as a single FX SFP to act as an additional port or an uplink port, giving the user additional options in managing network traffic. The CNGE6FX2TX4PoE is designed for use in unconditioned environments and typically used in perimeter surveillance. 3

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions. 3

  • Hanwha QNO-7012R

    Hanwha QNO-7012R

    The Q Series cameras are equipped with an Open Platform chipset for easy and seamless integration with third-party systems and solutions, and analog video output (CVBS) support for easy camera positioning during installation. A suite of on-board intelligent video analytics covers tampering, directional/virtual line detection, defocus detection, enter/exit, and motion detection. 3