Social Media Ideas for Social Engineering

Trust & Safety Tuesdays: Social Engineering

Trust and Safety Tuesdays are back again with another round of security practice information for keeping the Second Life community safe. In keeping with our theme of methods of fra...

AI Did Not Invent Social Engineering But It Did Industrialize It.

This year National Social Engineering Day falls on Aug. 6. This day is designed to give us an opportunity to remind people that cybercriminals do not always need sophisticated malw...

What Is Social Engineering and Why It Beats Firewalls

What Is Social Engineering and why is it so dangerous? A firewall can block malicious traffic, but it cannot stop an employee from sharing a verification code with a convincing cal...

LLM-Based Social Engineering Scams

OpenAI disrupted a social engineering group from Cambodia that used ChatGPT. Its scope is impressive: The network simultaneously conducted multiple types of scams, often blending e...

CyberheistNews Vol 16 #29 ClickFix Social Engineering is Now the Leading Malware Delivery Method

Report: Social Engineering Remains a Central Part of AI-assisted Attacks

Threat actors continue to rely on social engineering as AI is incorporated into their attacks, according to ESET’s Threat Report for the first half of 2026. ESET’s Director of Thr...

ClickFix Social Engineering is Now the Leading Malware Delivery Method

The ClickFix social engineering technique is now the top malware delivery method, according to a new report from ReliaQuest. These attacks trick users into copying a malicious comm...

Copilot tricked into telling reseachers how to hack itself

How to social engineer an AI's reasoning engine

The Talent Pipeline Nobody Talks About: What Young People Told Us About Cybercrime

"Someone online shows them a 'trick' that feels harmless at first. Then the community pulls them in. Everyone's doing it. It feels like skill, not crime."

Homo Hackabilis: Why Hack a Server When You Can Just Call a Human?

A hospitality consultant recounts four near-identical cyberattacks on clients, all exploiting staff via phone-based impersonation rather than technical exploits.

Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones

The most common way into a company last year was to ask. A web page tells the visitor to prove they are not a robot. While they read the instructions, it quietly places a command...

Attackers pick Levi's pockets in social engineering attack

Crims talked their way onto three employee PCs before trousering corporate data

Claude Mythos 5 made sock puppet accounts to socially engineer developers: here's what enterprises should know

The UK AI Security Institute (AISI) disclosed last night that the leading two frontier AI models from Anthropic and OpenAI took 19 unsanctioned actions against the live internet du...

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT...

Apollo’s Recent Breach Exposed a Major Risk for Finance Firms. It Isn’t Malware

The hack offers one of the clearest examples yet of how social engineering can give bad actors access to critical systems.

Hackers talked their way into Levi’s, and three computers were enough

Levi Strauss has disclosed a breach that involved no software vulnerability at all. Attackers used social engineering to reach three employees’ work computers, then took corporate...