How to defend your organization against social engineering attacks
Tech Republic Security
NOVEMBER 5, 2020
A security awareness program backed by multi-factor authentication can help protect your critical assets, says NordVPN Teams.
Authentication Security Awareness Social Engineering 
Synthetic Sabotage: How AI Tools Are Fueling Tailored Phishing Campaigns at Scale
SecureWorld News
APRIL 28, 2025
The phishing game has evolved into synthetic sabotage a hybrid form of social engineering powered by AI that can personalize, localize, and scale attacks with unnerving precision. At the heart of many of these kits are large language models (LLMs) trained or fine-tuned specifically for social engineering tasks.
Phishing 
105
105 Join 28,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
The Impact of AI on Social Engineering Cyber Attacks
SecureWorld News
NOVEMBER 8, 2023
Social engineering attacks have long been a threat to businesses worldwide, statistically comprising roughly 98% of cyberattacks worldwide. Given the much more psychologically focused and methodical ways that social engineering attacks can be conducted, it makes spotting them hard to do.
News alert: SquareX discloses ‘Browser Syncjacking’ – a new attack to hijack browser
The Last Watchdog
JANUARY 30, 2025
The extension then silently authenticates the victim into a Chrome profile managed by the attackers Google Workspace. Once this authentication occurs, the attacker has full control over the newly managed profile in the victims browser, allowing them to push automated policies such as disabling safe browsing and other security features.
Choose Your Own Adventure game animates security awareness training
SC Magazine
MAY 4, 2021
Infosec’s Choose Your Own Adventure training game “Deep Space Danger” tests employees on their knowledge of social engineering. The employees at your organization are badly in need of security awareness training. Two of them are fraudsters trying to socially engineer their way onto the station.
Voice Phishers Targeting Corporate VPNs
Krebs on Security
AUGUST 19, 2020
Allen said a typical voice phishing or “vishing” attack by this group involves at least two perpetrators: One who is social engineering the target over the phone, and another co-conspirator who takes any credentials entered at the phishing page and quickly uses them to log in to the target company’s VPN platform in real-time.
Phishing 363
363 
Ask These 10 Questions to Enhance Your Social Engineering Testing
NetSpi Executives
OCTOBER 15, 2024
TL;DR Don’t wait for a breach to happen before you pursue social engineering testing. Get the most value out of your social engineering testing by asking the questions below to maximize results. This focus not only protects against breaches, but it also fosters a culture of security awareness among employees.
March Madness Meets Cyber Mayhem: How Cybercriminals Are Playing Offense this Season
SecureWorld News
MARCH 20, 2025
This intersection of sports, money, and digital activity makes for a perfect storm of social engineering attacks. Gray urges organizations to double down on phishing awareness training, system policies, and proactive monitoring to mitigate damage before it happens.
Scams 88
88 
Navigating Authentication Challenges: A Closer Look at Contemporary CIAM
Security Boulevard
JULY 8, 2024
The need for robust authentication mechanisms has become paramount in the ever-evolving landscape of digital security. The post Navigating Authentication Challenges: A Closer Look at Contemporary CIAM appeared first on Security Boulevard.
Social Engineering: Definition, Types, Detection & Prevention
Spinone
NOVEMBER 12, 2020
What is social engineering? Social engineering is a manipulative technique used by criminals to elicit specific actions in their victims. Social engineering is seldom a stand-alone operation. money from a bank account) or use it for other social engineering types.
Human errors leading to an increase in cyber attacks on Maritime Industry
CyberSecurity Insiders
MARCH 23, 2021
Lack of awareness, budget issues and other factors are paving way to more cyber attacks on Maritime industry say experts as malware and phishing continue to rule the chart- both launched through social engineering attacks.
Cyber Attacks 141
141 
September Snafus: Hackers Take Advantage of Unwitting Employees
Approachable Cyber Threats
SEPTEMBER 24, 2022
Category News, Social Engineering. All of the attacks were carried out with relatively simple phishing and social engineering techniques. After getting an Uber employee’s login credentials, likely purchased from the dark web, the hacker then used social engineering to get around Uber’s multi-factor authentication.
Security Awareness Training across an SMB Organization
Spinone
MARCH 20, 2019
When considering a fully-featured and well thought out security plan , the human factor is an extremely important part of the equation, and arguably just as important as the technology component of the solution. In this article, we will take a look at cyber security awareness across an SMB organization.
ROUNDTABLE: Targeting the supply-chain: SolarWinds, then Mimecast and now UScellular
The Last Watchdog
FEBRUARY 3, 2021
We may think we know how to recognize a social engineering attack or phishing email, but with the amount of information available to attackers through open platforms and stolen information, they may know far more about us than we realize. I always recommend, if there’s an option with multi factor authentication, to NOT go by SMS.
Phishing 252
252 
Cyber Security Awareness Month: Time to Act and Protect Trust
Thales Cloud Protection & Licensing
OCTOBER 24, 2022
Cyber Security Awareness Month: Time to Act and Protect Trust. We’re approaching the end of Cyber Security Awareness Month , an annual event dedicated to increasing awareness of cybersecurity topics globally. Cybercriminals increasingly employ social engineering tactics because they are effective.
Cybersecurity Tips to Avoid Fouls During March Madness
SecureWorld News
MARCH 21, 2024
March Madness is a prime opportunity for cybercriminals to deploy phishing lures, malicious apps, and social engineering tactics," warns Krishna Vishnubhotla, VP of Product Strategy at mobile security firm Zimperium.
Cybersecurity 113
113 
Financial cyberthreats in 2024
SecureList
MARCH 25, 2025
The attackers employed social engineering techniques to trick victims into sharing their financial data or making a payment on a fake page. ” scams to complex social engineering plots with fake stores and delivery tracking apps. Pay particular attention to security patches. Trojan-Banker.AndroidOS.Agent.rj
Phishing 83
83 
Understanding the Essential Pillars of Phishing Mitigation
SecureWorld News
JUNE 6, 2023
These attacks can come from malicious instructions, social engineering, or authentication attacks, as well as heavy network traffic. Defending against phishing The general defense methods for protecting oneself against an attack can be thought of as the pillars that support your overall security online.
Phishing 98
98 
Unanswered Questions Loom Over Cyber Attacks on M&S, Co-op & Harrods
Jane Frankland
MAY 3, 2025
While details remain sparse, reports suggest social engineering tactics like phishing, SIM swapping, and multi-factor authentication (MFA) fatigue attacks may have been used to infiltrate systems. Once inside, they’ll likely have used other methods to successfully bypass enterprise security tools.
Cyber Attacks 100
100 
Hopeful employees targeted as phishers identify new windows of opportunity
CyberSecurity Insiders
APRIL 16, 2021
The emails pose as company updates and are often socially engineered to look like they have been personally tailored to the recipient. The kind that could throw off even your most security-aware employees. Carefully crafted emails like these containing a malicious link can fool even the most security-aware of employees.
Phishing 113
113 
How SE Helped Me in Public Speaking
Security Through Education
MARCH 4, 2024
In prepping for my speech, I realized that the techniques I daily use as a certified social engineer equipped me more than I realized. Influence Techniques At Social-Engineer, you may often hear or read about us referring to “Influence Techniques.” However, speaking to an audience is a whole different beast.
FINALLY! Google Makes 2FA App Useable — BUT There’s a Catch
Security Boulevard
APRIL 25, 2023
Google Authenticator app now syncs your secrets: No stress if you break your phone. Google Makes 2FA App Useable — BUT There’s a Catch appeared first on Security Boulevard. 2FA OTP ASAP? The post FINALLY!
Authentication 144
144 
Understanding SMiShing
Security Through Education
JULY 1, 2024
Vulnerabilities Exposed by SMiShing SMiShing exploits various vulnerabilities, including: Human Trust: Attackers may leverage social engineering techniques to manipulate human psychology, exploiting trust and inducing victims to take actions against their best interests.
100 MILLION Americans in UnitedHealth PII Breach
Security Boulevard
OCTOBER 25, 2024
The post 100 MILLION Americans in UnitedHealth PII Breach appeared first on Security Boulevard. Not cute: $UNH’s Change Healthcare unit paid a big ransom—its IT was as weak as a kitten.
Healthcare 133
133 
How Secure Is Your Slack Channel?
SecureWorld News
JUNE 16, 2021
If someone is in your organization's Slack channel, then they are authenticated and the environment is secure. The group was able to steal the source code for FIFA 21 and the source code for the Frostbite engine that powers other popular games, such as Battlefield. You want to believe it is true.
Top 7 MFA Bypass Techniques and How to Defend Against Them
SecureWorld News
AUGUST 5, 2023
Multi-factor authentication (MFA) is a fundamental component of best practices for account security. Traditionally, this approach to authentication delivers a unique code to a user's email or phone, which is then inputted following the account password. SMS-based MFA MFA via SMS (i.e.,
SIM Swappers Try Bribing T-Mobile and Verizon Staff $300
Security Boulevard
APRIL 16, 2024
Not OK: SMS 2FA — Widespread spam targets carrier employees, as scrotes try harder to evade two-factor authentication. The post SIM Swappers Try Bribing T-Mobile and Verizon Staff $300 appeared first on Security Boulevard.
Mobile 132
132 
The Power of Depth of Defense for Cybersecurity
SecureWorld News
JULY 13, 2023
User Awareness Training: Educating employees about cybersecurity best practices and raising awareness about common threats like phishing emails and social engineering attacks can significantly reduce the risk of successful breaches.
MY TAKE: Account hijackers follow small banks, credit unions over to mobile banking apps
The Last Watchdog
APRIL 10, 2019
Organizations like OneSpan now analyze bank fraud through the mobile app landscape through areas like social engineering attacks, screen captures, or changing SIM cards, LaSala told me. A solution will recognize that the user is always using the same device and allows for a more seamless authentication path.
Banking 147
147 
Spear Phishing Prevention: 10 Ways to Protect Your Organization
eSecurity Planet
AUGUST 23, 2023
This method involves using emails, social media, instant messaging, and other platforms to manipulate users into revealing personal information or performing actions that can lead to network compromise, data loss, or financial harm. The likelihood that the target will respond to a message is increased by this personalization.
Phishing 98
98 
IDENTITY MANAGEMENT DAY 2023: Advice from Cyber Pros
CyberSecurity Insiders
APRIL 10, 2023
Why is identity management and security important in 2023? “In In the current digital landscape, identity security has gained paramount importance due to the growing cyber risks posed by phishing and social engineering attacks utilizing AI. Security awareness programs for all employees.
Identity Theft 105
105 
Identity-Based Breaches: Navigating the Aftermath
Duo's Security Blog
OCTOBER 8, 2024
As organizations continue to rely on digital identities for access control and authentication, the risk of identity compromise grows. Stronger controls reduce the likelihood of future breaches and improve the organization's security posture. According to Cisco Talos, 80% of breaches involved identity as a key component.
Passwords 111
111 
When Good Tools Go Bad: Dual-Use in Cybersecurity
Security Boulevard
APRIL 8, 2025
Encryption Technologies: Encryption protects data confidentiality and integrity, but attackers also use it to conceal malware, establish encrypted communication channels, and secure stolen data. Social Engineering Tactics: These tactics exploit human psychology to manipulate individuals.
Misconfigured MFA Increasingly Targeted by Cybercriminals
Security Boulevard
JUNE 26, 2024
In the first quarter of 2024, nearly half of all security incidents our team responded to involved multi-factor authentication (MFA) issues, according to the latest Cisco Talos report. The post Misconfigured MFA Increasingly Targeted by Cybercriminals appeared first on Security Boulevard.
Authentication 119
119 
Hybrid phishing and vishing attacks hunt for credit card info
SC Magazine
JUNE 24, 2021
A new blog post report has shone a light on the malicious practice known as voice phishing or vishing – a social engineering tactic that some cyber experts say has only grown in prominence since COVID-19 forced employees to work from home. (Ser Amantio di Nicolao, CC BY-SA 3.0 , via Wikimedia Commons).
Phishing 81
81 
Fake Chrome Extensions: Google Asleep at the Switch
Security Boulevard
MAY 20, 2021
That “Microsoft Authenticator” extension you installed is actually malware, designed to phish for your passwords. The post Fake Chrome Extensions: Google Asleep at the Switch appeared first on Security Boulevard.
Authentication 105
105 
Intro to phishing: simulating attacks to build resiliency
Security Affairs
APRIL 21, 2023
Original post at [link] While organizations must still account for flashy vulnerability exploitations, denial-of-service campaigns, or movie-themed cyber-heists, phishing-based social engineering attacks remain a perennial choice of cybercriminals when it comes to hacking their victims.
Phishing 98
98 
Hackers Exploit DocuSign APIs for Phishing Campaign
Security Boulevard
NOVEMBER 4, 2024
Cybercriminals are exploiting DocuSign’s APIs to send highly authentic-looking fake invoices, while DocuSign’s forums have reported a rise in such fraudulent campaigns in recent months.
Phishing 116
116 
How Secure Is Your Slack Channel?
SecureWorld News
JUNE 16, 2021
If someone is in your organization's Slack channel, then they are authenticated and the environment is secure. The group was able to steal the source code for FIFA 21 and the source code for the Frostbite engine that powers other popular games, such as Battlefield. You want to believe it is true.
Is the Future of Digital Identity Safe?
Thales Cloud Protection & Licensing
MARCH 29, 2022
Although businesses in all sectors are actively adopting security controls like identity and access management to protect their data and resources, technology is evolving at such a fast pace that humans cannot keep up. Security analytics and customer experience are essential. It is not only technology that is evolving.
Scams 77
77 
How to Stop Phishing Attacks with Protective DNS
Security Boulevard
OCTOBER 2, 2023
Phishing attackers are increasingly using social engineering techniques to personalize their attacks and target specific individuals or organizations. For example, attackers may research their victims on social media or other online sources to gather personal information that can be used to make their phishing emails more believable.
DNS 64
64 
Google Lauds 2FA Results—So Why do People HATE It?
Security Boulevard
FEBRUARY 10, 2022
Google started auto-enrolling users in two-factor authentication (2FA) nine months ago. appeared first on Security Boulevard. And now it’s releasing the results: Account breaches halved. The post Google Lauds 2FA Results—So Why do People HATE It?
Hackers Intercept USPS Workers' Paychecks in Direct Deposit Scam
SecureWorld News
MAY 22, 2023
It was an old-school use of mirrored websites and social engineering to get USPS employees to enter their information into a fraudulent website. Randy Watkins, CTO at Critical Start, said: "This attack is an unfortunate example of exploitation of lacking foundational security controls.
Scams 98
98 
What VCs See Happening in Cybersecurity in 2023
eSecurity Planet
DECEMBER 7, 2022
He has over 20 years experience in identity and security. There are many issues like API security, authentication, data residency, privacy and compliance. Lee says that developers are implementing security much earlier in the process. This helps to explain the rise of social engineering attacks , especially with phishing.
Cybersecurity 145
145 
Let's personalize your content