Study: 'Security Fatigue' May Weaken Digital Defenses

A study led by the University at Albany finds that repeated exposure to cybersecurity requirements causes 'security fatigue,' where employees become emotionally exhausted and disengaged from security practices. The research shows this fatigue depletes self-regulation capacity, leading workers to ignore warnings, reuse weak passwords, or seek workarounds—not out of malice but from cognitive overload.