When an ethical hacker spoke to Euronews in November 2026, the examples were far from abstract: supermarket fridges, blood services and Berlin's state network. According to the interview, cyberattacks increasingly hit critical infrastructure, and they often succeed by exploiting human error. That makes the topic personal for everyone, not just for IT teams. This guide covers practical human error cyberattack protection tips based on what the interview highlights.

What the Euronews interview says about attacks on critical infrastructure

The Euronews summary points to a range of targets: everyday retail equipment such as supermarket fridges, health-related services such as blood services, and government systems such as Berlin's state network. The common thread, according to the ethical hacker, is that attackers often exploit human error rather than only breaking through technical defenses.

The headline also carries a striking claim: one in two people risk falling victim to a cyberattack. The material available to us is a short summary, so we cannot detail every case the hacker discussed. What the summary does make clear is the central message: the weakest point is frequently a person, not a machine.

How human error opens the door: phishing, weak credentials and social engineering

"Human error" is not a judgment on anyone's intelligence. It describes ordinary moments where a convincing trick meets a busy person. Three patterns come up again and again in security work.

Phishing. A message that looks like it comes from a bank, a courier or a colleague urges you to click a link or open an attachment. The link leads to a fake login page, and anything you type goes to the attacker.

Weak or reused credentials. If you use the same password across services, one leaked password can unlock several accounts. Short or predictable passwords are easier to guess.

Social engineering. This is manipulation rather than hacking in the technical sense: a phone call from a fake support agent, an urgent request from a supposed manager, or pressure to act before you think.

A simple mistake does not always involve a victim clicking anything. Configuration slips by staff can also expose data at scale. Our report on how a CBSE AWS bucket misconfiguration exposed 2 million students shows how a single oversight can leave sensitive records open to anyone who finds them.

Not every attack relies on people, of course. Some exploit software flaws the vendor does not yet know about, known as a zero-day vulnerability. But the interview's point stands: many successful attacks start with a human moment, not an exotic exploit.

Why 'one in two' is a claim to read carefully

The "one in two people" figure makes a memorable headline, but treat it with care. The summary we have does not explain how the number was calculated, over what period, or what counts as "falling victim." A victim could mean anything from a clicked phishing link to a stolen account.

That does not make the warning empty. It is better read as a reminder that exposure to attempts is common and that anyone can slip. Rather than fixating on a statistic, focus on what you can control: reducing the odds that a single mistake leads to serious harm.

Practical steps to protect your accounts and devices

These habits address the patterns above and need no special expertise.

  • Use a unique password for every account. A password manager can generate and store them so you do not have to remember each one.
  • Turn on multi-factor authentication (MFA). Even if a password is stolen, a second step makes it much harder to use. Prefer authenticator apps or hardware keys over text messages where possible.
  • Slow down on unexpected messages. Urgency is a classic pressure tactic. If a message asks for money, codes or logins, verify it through a separate channel, such as calling the organization using a number you already trust.
  • Check links before clicking. Go to the website directly instead of following a link in an email or text.
  • Keep software updated. Updates close known security holes on your phone, computer and apps.
  • Be careful what you share. Details posted publicly can help an attacker make a message sound convincing.
  • Report mistakes quickly. If you clicked something suspicious, change your password and tell your IT team or service provider right away. Speed limits damage.

What This Means For You

The Euronews interview is a reminder that attacks on large systems and attacks on individuals often share the same entry points. You cannot control how a supermarket or a government network is defended, but you can control your own habits. Treating every unexpected request with healthy skepticism, and having MFA and unique passwords in place, means one error is far less likely to become a disaster.

If you also use a VPN, remember what it does and does not do: it encrypts your connection, but it will not stop you from entering your password on a fake login page. Good habits and good tools work together.

Takeaways

The most effective human error cyberattack protection tips are also the simplest. This week, audit your passwords and replace any reused ones. Enable multi-factor authentication on your email, banking and social accounts. Treat unexpected messages with suspicion and verify before you act. And for a clear example of how one simple mistake can expose millions of people's data, read our piece on the CBSE misconfiguration.