Users remain the weak link in the chain of defense within most mature organizations, making social engineering attacks highly successful and lucrative for cybercriminals.