What do you think is the biggest “human factor” risk in cybersecurity today?

[Christopher]

As a cybersecurity professional, I’ve seen time and again that technology alone can’t stop breaches; people play the most critical role. From phishing emails to weak passwords, the human factor often becomes the entry point for attackers.

I would love to hear from you guys. What human mistakes or behaviors do you think put organizations most at risk?
Do you believe training alone is enough, or do we need a deeper cultural shift?