Leading concerns include software vulnerabilities / zero-days (53.9 percent), phishing / social engineering (52.2 percent), supply chain attacks (49 percent) and ransomware (48.5 percent).
Arguably even more alarming is the number of organizations that would like to sweep a breach under the rug and act like it never happened. Among those surveyed, 42 percent said they have been told to keep a security breach confidential when they knew they were obligated to disclose it. Nearly one in three – 29.9 percent – said they complied with orders to keep a breach under wraps.
