Tailgating exploits human behavioral patterns and social conventions to gain unauthorized access to secured areas, thereby jeopardizing the entire IT infrastructure.
Cybercriminals compromised an account on Tchap and stole data from over 73,000 accounts and 650,000 messages; the attacker cited social engineering, exposed LDAP credentials, and missing token validation during file downloads as causes.
Attackers systematically exploit AI branding in social engineering campaigns to manipulate employees — the attack vector is shifting from technical to behavioral vulnerabilities.
Prompt injection vulnerability in Google Gemini Voice Assistant enables hidden malicious commands through manipulated notifications, potentially leading to social engineering and data misuse.
Pig Butchering has become an industrialized, cross-border fraud system with a division of labor structure, in which forced laborers are sometimes also involved.
Romance scams and AI-driven emotional manipulation require a rethink of security architecture: Technical protection without psychological early detection is no longer sufficient.
A social engineering attack on an employee in April enabled unauthorized access to customer data from nearly 6 million people at Carnival Corporation, including passport and driver’s license numbers.
Hackers compromised Instagram profiles through prompt injection attacks against Meta’s AI support system and bypassed automated identity verification using deepfake-generated videos.
The JINX-0164 group compromises crypto developers through fake LinkedIn job interviews to deploy the Python malware AUDIOFIX, which steals passwords, SSH keys, and cryptocurrency wallet data.
