Pinned post
Social Engineering Community
@sec_defcon
Social Engineering Community (SEC) village
31 Following 6.1K Followers 875 Posts
Latest posts 5
Friday question for the social engineering crowd:
What's the smallest detail you've seen make a pretext feel believable?
A name? An internal acronym? The right timing?
Sometimes the tiniest details do the heaviest lifting. 👀
What's the smallest detail you've seen make a pretext feel believable?
A name? An internal acronym? The right timing?
Sometimes the tiniest details do the heaviest lifting. 👀
What makes someone seem trustworthy?
A confident voice?
A familiar name?
An official-looking badge?
Knowing details they shouldn't?
Social engineers know how to borrow credibility.
Which one do you think people fall for most often? 👀
A confident voice?
A familiar name?
An official-looking badge?
Knowing details they shouldn't?
Social engineers know how to borrow credibility.
Which one do you think people fall for most often? 👀
Your EDR is humming. Your badge readers are working.
Meanwhile, attackers are looking for the gap between them. 👀
SEC co-founder Snow explores where cyberattacks become physical breaches in her latest article for Security Today.
🔗 securitytoday.com/articles/2026/…
Meanwhile, attackers are looking for the gap between them. 👀
SEC co-founder Snow explores where cyberattacks become physical breaches in her latest article for Security Today.
🔗 securitytoday.com/articles/2026/…
securitytoday.com The Blind Spot in Enterprise Security Where Cyber Attacks Become Physical Breaches -- Security Today Attackers increasingly use voice phishing and AI deepfakes to bypass digital filters and gain physical building access, exposing critical silos between cyber and facilities teams. ⏱️ SEC in 60: The callback rule.
Someone calls claiming to be IT, your bank, or your boss?
Don't trust caller ID alone. It can be spoofed.
Hang up. Find the official number yourself. Call back.
A familiar number isn't proof of a familiar caller.
Someone calls claiming to be IT, your bank, or your boss?
Don't trust caller ID alone. It can be spoofed.
Hang up. Find the official number yourself. Call back.
A familiar number isn't proof of a familiar caller.