Contact Us
[contact-form-7 id="ceb4db8" title="Contact form 1"]
Field Diaries
Social Engineering: The New Guy Isn’t Bald
Most security awareness training is focused on external threats. But what happens when the threat seemingly comes from within?
Social Engineering: Vishing for Whales
Overview An underestimated social engineering attack vector in the current day and age is the vishing attack. People are constantly harassed with these vishing attempts outside of the workplace, whether it be automated messages asking about their car’s extended warranty, or real…
Social Engineering: Is it Okay to be Rude?
The story of how a fellow analyst and I exploited peoples’ kindness, and how it could have ruined a financial institution with billions in assets.
Penetration Testing: Passwords and Accounts with Admin Access
Passwords for network devices are important. Find out why it is critical to ensure that all devices utilize complex passwords.
Social Engineering: The Importance of Escort Policies
Escort Policies are strong deterrents against potential social engineering because no bad actor wants to perform a malicious act while being watched.
Social Engineering: We Aren’t Really Expanding the Building!
Social engineering can be defined as any malicious activity accomplished through human interaction. This is an onsite example.