Your security is increasing at risk from organisations and
corporations whose own grasp of security is appalling. Because instead
of dealing with it they externalise risks and consequences onto the
public and customers.
Even worse, is where attempts to query that security is actively
punished.
This is typical now. Listen here (at 42:20) with an example regarding
the UK NHS whose incompetence plays directly into the hands of
cybercriminals.
My UK bank semi-regularly cold-calls me and ask me to authenticate by providing personal information. When I decline they readily tell me instead to call some number available on the bank website. So they not only are incompetent, they actually know it.
why? isn't getting the number from the website the right action? you can verify that you have the bank website, get the right number, and i presume even go to the bank branch to get the number in person, and then save the number as it should not change.
or are you referring to the call itself? i wonder why they need to do that.
Even worse, is where attempts to query that security is actively punished.
This is typical now. Listen here (at 42:20) with an example regarding the UK NHS whose incompetence plays directly into the hands of cybercriminals.
[0] https://cybershow.uk/episodes.php?id=24 (time:42:20)