In security, the humans are the weakest point.

They always have been.

Phishing has always been effective, and now it's insanely effective.

Writing perfectly targeted, totally bespoke phishing lures for individual people.

Qualitative nuance at quantitative scale.