User mistakes aid most cyberattacks, new studies find

When a cybersecurity breach hits the news, those involved often have incentive to play up the sophistication of the attack.

If hackers are portrayed as well-funded geniuses, victims look less vulnerable, security firms can ply their products and services, and government officials can push for tougher regulation or seek more money for cyberdefense.

But two reports being released this week offer a simpler scenario.