  This paper examines the complex nature of cyber attacks through an analysis
of the LastPass breach. It argues for the integration of human-centric
considerations into cybersecurity measures, focusing on mitigating factors such
as goal-directed behavior, cognitive overload, human biases (e.g., optimism,
anchoring), and risky behaviors. Findings from an analysis of this breach
offers support to the perspective that addressing both the human and technical
dimensions of cyber defense can significantly enhance the resilience of cyber
systems against complex threats. This means maintaining a balanced approach
while simultaneously simplifying user interactions, making users aware of
biases, and discouraging risky practices are essential for preventing cyber
incidents.
