If you’re in cyber security, then I pity your employer. You openly admitted you don’t know the main difference between cyber security and social engineering, this is the very basics of security.

Two, you need to learn to read the whole article, again, basics of cyber security. If you can’t read an entire article this basic, then how is anyone supposed to expect you to understand how to read a CVE report?

“The new step follows earlier efforts to harden mobile use across the force, including training and internal drills designed to raise officers’ awareness of social-engineering tactics. In recent years, the IDF even staged scenarios mimicking Hezbollah-linked “honeypots” to stress-test units’ digital discipline.”

You read the first two paragraphs, which aligned with your confirmation bias, and ignored the further details that explained that it’s due to the push against social engineering, which doesn’t help your confirmation bias.