--- title: Best Phishing posts of 2022 | daily.dev description: The most upvoted Phishing posts of 2022, curated by the daily.dev community. canonical: https://daily.dev/tags/phishing/best-of/2022 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/tags/phishing/best-of/2022 og:type: website og:site_name: daily.dev og:title: Best Phishing posts of 2022 | daily.dev og:description: The most upvoted Phishing posts of 2022, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Phishing — 2022 1. 1 [](/posts/how-attackers-can-bypass-2fa-m5bq8dhsr "How attackers can bypass 2FA") Article System Weakness · 4y How attackers can bypass 2FA There are several ways to implement 2FA: SMS 2FA, Authenticator App, Push-based 2FA and Security Keys. If the service you use to send SMS to users is compromised, your users are also at risk. 43 2. 2 [](/posts/debunking-myths-about-https-wrfvnf54c "Debunking myths about HTTPS") Article DEV · 4y Debunking myths about HTTPS The purpose of HTTPS is to secure the transit but data can be intercepted in various places, for example, on web servers or databases. 15 1 3. 3 [](/posts/most-attackers-need-less-than-10-hours-to-find-weaknesses-v6ptz3xqb "Most Attackers Need Less Than 10 Hours to Find Weaknesses") Article Dark Reading · 4y Most Attackers Need Less Than 10 Hours to Find Weaknesses The average ethical hacker can find a vulnerability that allows the breach of the network perimeter and then exploit the environment in less than 10 hours. Nearly three-quarters of ethical hackers think most organizations lack the necessary detection and response capabilities to stop attacks. 14 4. 4 [](/posts/a-guide-to-endpoint-protection-nvxtgspmk "A Guide to Endpoint Protection") Article DZone · 4y A Guide to Endpoint Protection The Ponemon 2020 State of Endpoint Security Risks Report revealed that more than 50% of respondents said that their companies are poor at handling endpoint security threats. Insider Threat Studies show that almost 95% of all cybersecurity breaches are a result of human error. Insider threat includes the actions of a contractor or employee inside the company that either maliciously or accidentally causes a breach. 12 5. 5 [](/posts/cross-site-scripting-xss-attacks-cqpss0-jk "Cross-Site Scripting (XSS) Attacks") Article System Weakness · 4y Cross-Site Scripting (XSS) Attacks Cross-Site Scripting (XSS) is a common security vulnerability that is more prevalent in web applications. It’s estimated that more than 60% of web applications are susceptible to XSS attacks. As a result, the dangerous code will be presented to the victim anytime they perform a desired action on the corrupted web page. The persistent cross-site scripting attack takes place just like the non-persistent attack. 11 [See all Phishing archives](/tags/phishing/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/tags/phishing/best-of/2022#page","url":"https://daily.dev/tags/phishing/best-of/2022","name":"Best Phishing Posts of 2022","description":"The most upvoted Phishing posts of 2022, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/tags/phishing/best-of/2022#items","numberOfItems":5,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/how-attackers-can-bypass-2fa-m5bq8dhsr","name":"How attackers can bypass 2FA"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/debunking-myths-about-https-wrfvnf54c","name":"Debunking myths about HTTPS"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/most-attackers-need-less-than-10-hours-to-find-weaknesses-v6ptz3xqb","name":"Most Attackers Need Less Than 10 Hours to Find Weaknesses"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/a-guide-to-endpoint-protection-nvxtgspmk","name":"A Guide to Endpoint Protection"},{"@type":"ListItem","position":5,"url":"https://daily.dev/posts/cross-site-scripting-xss-attacks-cqpss0-jk","name":"Cross-Site Scripting (XSS) Attacks"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Tags","item":"https://daily.dev/tags"},{"@type":"ListItem","position":3,"name":"Phishing","item":"https://daily.dev/tags/phishing"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/tags/phishing/best-of"},{"@type":"ListItem","position":5,"name":"2022"}]}]} ```