Not exactly. Here's a list of common mistakes: https://owasp.org/www-project-top-ten/ https://owasp.org/www-project-top-ten/ Social engineering is definitely i

Not exactly. Here's a list of common mistakes: https://owasp.org/www-project-top-ten/ https://owasp.org/www-project-top-ten/ Social engineering is definitely in there, but it's more like one step in some. And perhaps involves four out of ten.