On: Ask HN: Are most security breaches based on social...

[muzani]

Not exactly. Here's a list of common mistakes: https://owasp.org/www-project-top-ten/

Social engineering is definitely in there, but it's more like one step in some. And perhaps involves four out of ten.