The Annual Cybersecurity Attitudes and Behaviors Report 2024-2025

Hold on tight. 2024 is officially a whirlwind: elections, sporting events, and enough breaking news to make your head spin. Between deciphering political mudslinging and keeping up with “Have you seen what AI can do now?!”, it feels like the year is on fast forward, with no sign of slowing.

But this year isn’t just momentous in politics and sports: Cybersecurity Awareness Month is turning 21 this year! Yet, as we raise a glass (which it could now legally do across the world) we can’t ignore that since its inception, the online threats we face have rocketed. The stakes are higher than ever.

Thankfully, y’all are a discerning bunch. More and more of this beautiful community are ditching the outdated notion that security awareness training magically transforms people into security evangelists.

More and more of you are asking: “What now?”

Well, it starts with understanding what people think, and what people do, and why they do what they do. Because (genuinely rather fascinating) behaviors and attitudes abound—from the considered clickers to the free-wheeling risk-takers—a foundation in behavioral science is now the cornerstone of strong cybersecurity.

That’s exactly what makes this report essential reading. It’s why we’re back for the fourth year running, with the big-hitting, data-driven blockbuster you’ve come to expect.