Comment by somerandom2407
8 days ago
That's not correct - more than 1/3 of initial access is by phishing at present, according to Cisco Talos (and others major security publications largely agree with this). Ref: https://blog.talosintelligence.com/ir-trends-q1-2026/
What you may be confusing with is the number of incidents involving token theft, which is often facilitated by phishing.
That publication is talking about phishing as a threat to workers inside corporations and government agencies and public administrations. It’s not a thing for regular consumers. Passkeys aren’t usually used in corporate environments with an IT department anyways.