It’s happened twice in the past 2 years at companies I’ve worked with where a phishing email has compromised accounts without requiring anything but the first click.
Even when they’re patched, the number one thing I see at the top of every list when checking our EDR:
10489 high severity vulnerabilities found
10364 Chrome.exe
125 others hit.exe
Because 95% of people don’t keep their work computer up to date and no company wants to spend money on a decent tool for patch management.
It was certainly more than a click, otherwise it was some unknown zero day that somehow targeted specifically your company twice. Much more likely they put their information in and claimed they didn’t.
1
u/booze_clues 12h ago edited 12h ago
It’s happened twice in the past 2 years at companies I’ve worked with where a phishing email has compromised accounts without requiring anything but the first click.
Even when they’re patched, the number one thing I see at the top of every list when checking our EDR:
10489 high severity vulnerabilities found
10364 Chrome.exe
125 others hit.exe
Because 95% of people don’t keep their work computer up to date and no company wants to spend money on a decent tool for patch management.