96% of CISOs acknowledge that they face a well-organized criminal industry motivated by financial gain. 72% say adversaries are moving faster than they are, and 69% say their adversaries have improved their attack capabilities in the last 12-18 months. Employees are the primary attack vector, according to 71% of the CISOs interviewed, as attackers take advantage of social channels to launch more sophisticated targeted attacks. The top three threats CISOs and their teams face are phishing, ransomware and business email compromise (BEC)
Source: https://www.helpnetsecurity.com/2021/04/22/cisos-obstacles/