Still one of the most overlooked aspects of cybersecurity is the human factor. I would wager that at least half of all major data breaches are accomplished by "social engineering", be it via (spear) phishing or pretexting or waterholing or any number of other tricks, and many others (as stated in the article) are simply the result of human error (though often combined with terrible IT policies).

Education is an important part of cybersecurity, and it is neglected by just about everyone.