2024 Cofense Annual State of Email Security Report

The 2024 Cofense Annual State of Email Security Report details the significant increase in malicious email threats that bypass secure email gateways (SEGs). It reports a 104.5% rise in such threats per customer, with a malicious email detected every minute. Credential phishing emerged as the primary threat vector, accounting for 91% of active threat reports, and saw a 67% increase in volume compared to the previous year. The report highlights evolving tactics in phishing campaigns, including the rising use of QR codes, which experienced a 331% increase in active threat reports. Additionally, it notes that healthcare and finance sectors were the most targeted, with increases in malicious emails bypassing SEGs of 84.5% and 118%, respectively. The report emphasizes the need for organizations to enhance their email security measures and employee training to combat these growing threats effectively. It concludes that relying solely on SEGs is insufficient to protect against the sophisticated nature of current phishing attacks.