This report presents findings from the 2024 State of the Phish survey, which examines risky actions, real-world threats, and user resilience within the context of human-centric cybersecurity. The report is based on a survey of 7,500 end users and 1,050 security professionals across 15 countries, and it analyzes user behavior regarding cybersecurity practices. It details that 71% of working adults admitted to taking risky actions, with 96% of those acknowledging the risks involved. The report outlines the current state of security awareness initiatives and benchmarks the resilience of individuals and organizations against cyber threats. It also discusses the prevalence of various cyber threats, including ransomware and social engineering tactics, and highlights the gap between user perception of security responsibility and the views of security professionals. The findings indicate a need for improved communication and training to enhance security awareness and mitigate risks associated with user behavior.