Social Media Ideas for Social Engineering

Trust & Safety Tuesdays: Social Engineering

Trust and Safety Tuesdays are back again with another round of security practice information for keeping the Second Life community safe. In keeping with our theme of methods of fra...

AI Did Not Invent Social Engineering But It Did Industrialize It.

This year National Social Engineering Day falls on Aug. 6. This day is designed to give us an opportunity to remind people that cybercriminals do not always need sophisticated malw...

What Is Social Engineering and Why It Beats Firewalls

What Is Social Engineering and why is it so dangerous? A firewall can block malicious traffic, but it cannot stop an employee from sharing a verification code with a convincing cal...

LLM-Based Social Engineering Scams

OpenAI disrupted a social engineering group from Cambodia that used ChatGPT. Its scope is impressive: The network simultaneously conducted multiple types of scams, often blending e...

Report: Social Engineering Remains a Central Part of AI-assisted Attacks

Threat actors continue to rely on social engineering as AI is incorporated into their attacks, according to ESET’s Threat Report for the first half of 2026. ESET’s Director of Thr...

The Talent Pipeline Nobody Talks About: What Young People Told Us About Cybercrime

"Someone online shows them a 'trick' that feels harmless at first. Then the community pulls them in. Everyone's doing it. It feels like skill, not crime."

ClickFix Social Engineering is Now the Leading Malware Delivery Method

The ClickFix social engineering technique is now the top malware delivery method, according to a new report from ReliaQuest. These attacks trick users into copying a malicious comm...

CyberheistNews Vol 16 #29 ClickFix Social Engineering is Now the Leading Malware Delivery Method

Homo Hackabilis: Why Hack a Server When You Can Just Call a Human?

A hospitality consultant recounts four near-identical cyberattacks on clients, all exploiting staff via phone-based impersonation rather than technical exploits.

Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones

The most common way into a company last year was to ask. A web page tells the visitor to prove they are not a robot. While they read the instructions, it quietly places a command...

Copilot tricked into telling reseachers how to hack itself

How to social engineer an AI's reasoning engine

Your Voice Assistant Can Be Social-Engineered Too, and Nobody's Watching For It

We spent a decade teaching people not to click the phishing link. Now we've built agents that will happily take instructions from whatever's playing in the background, and we haven...

Claude Mythos 5 made sock puppet accounts to socially engineer developers: here's what enterprises should know

The UK AI Security Institute (AISI) disclosed last night that the leading two frontier AI models from Anthropic and OpenAI took 19 unsanctioned actions against the live internet du...

Attackers pick Levi's pockets in social engineering attack

Crims talked their way onto three employee PCs before trousering corporate data

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT...

Apollo’s Recent Breach Exposed a Major Risk for Finance Firms. It Isn’t Malware

The hack offers one of the clearest examples yet of how social engineering can give bad actors access to critical systems.

Bypassing AI guardrails is so easy a script kiddie can do it

Claiming 'it's my server' was often enough to persuade models to help

Anthropic’s Mythos Test Raises New Concerns About Social Engineering

A recent test of Anthropic’s Mythos model has raised a question for the cybersecurity industry—as AI systems become more capable, will defenders need to prepare not only for crimin...

Anthropic AI Creates Fake Identities, Tries to Trick Developers Into Approving Malicious Code

What began as a controlled cybersecurity evaluation crossed into the real world after AI agents contacted actual people, created deceptive online personas, and attempted to execute...

"I'm allowed to do this": how attackers talk past AI safeguards

Getting an AI model to launch a cyberattack usually just takes asking the right way. Cisco Talos researchers say that claiming you own the servers you are attacking often works, an...

Hackers talked their way into Levi’s, and three computers were enough

Levi Strauss has disclosed a breach that involved no software vulnerability at all. Attackers used social engineering to reach three employees’ work computers, then took corporate...

Report: Vishing and Device Code Phishing Are Surging

Social engineering remains a central part of modern cyberattacks, according to a new report from CrowdStrike. Attackers are increasingly turning to voice phishing because it bypass...

Report: AI Chatbots Are More Effective at Building Trust Than Human Scammers

A study has found that AI chatbots can be more effective at social engineering than human scammers, WIRED reports. The researchers looked at a form of romance scam commonly known a...

Every SOC Today Is Answering the Wrong Question

Ask most detection engineers what a SOC does, and they'll say: it finds compromised machines. That's the wrong question. Attackers stopped compromising machines as the primary obje...