PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Manipulating the Mind: The Strategy and Practice of Social Engineering

bishopfox.com | blog | #phishing | #red-team | #social-engineering | #security-awareness | #vishing | #pretexting
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox's social engineering primer covers phishing, vishing, smishing and pretexting, how red teams set objectives, and how defenders blend human and technical controls to counter manipulation.
Published
Collected

Related coverage

blog · bishopfox.com
How Does Social Engineering Work? From Planning to Execution
Recap of a Bishop Fox webcast on running proactive social engineering engagements: common tactics like phishing, vishing, smishing and impersonation, plus how to set objectives and define targets.
blog · hackerone.com
Hacker Q&A with Rachel Tobac: Hacking Companies Through Their People
Q&A with social engineer Rachel Tobac: how her firm SocialProof Security hacks companies through their people, her path from neuroscience to winning DEF CON's SECTF, and what social engineering takes.
blog · netspi.com
Social Engineering Stories: One Phish, Two Vish, and Tips for Stronger Defenses
Real social engineering engagement stories: an open SMTP relay let testers phish from the company's own domain, plus vishing lessons and practical tips to strengthen organizational defenses.
blog · netspi.com
Ask These 10 Questions to Enhance Your Social Engineering Testing
Social engineering remains the top way attackers gain entry. This article lists ten questions spanning phishing, vishing, and physical pentesting that help organizations get more from their testing.
blog · netspi.com
The Rapid Evolution of AI Voice Cloning and its Implications for Cybersecurity
Modern AI voice cloning needs only a minute or two of audio to produce realistic replicas. The article examines real-time impersonation risks, NetSPI's cloner testing tool, and mitigations.
blog · netspi.com
Elevating Your Defenses with NetSPI’s Updated Social Engineering Solutions
NetSPI updates its social engineering offerings with adversarial techniques mimicking real-world phishing and vishing, giving organizations a realistic assessment of human-layer defenses.
Back