The Cybersecurity and Infrastructure Security Agency (CISA) noted that 90% of successful cyber-attacks begin with phishing emails, which is unsurprising. Social engineering attacks prey on the exploitation of human psychology and range from phishing emails to impersonation phone calls.