The Rapid Evolution of AI Voice Cloning and its Implications for Cybersecurity

HackerOne's Dane Sherrets explains how scammers clone a voice from under 30 seconds of public audio, why executive impersonation is trivial today, and which signs can expose synthetic speech.

Real social engineering engagement stories: an open SMTP relay let testers phish from the company's own domain, plus vishing lessons and practical tips to strengthen organizational defenses.

Social engineering remains the top way attackers gain entry. This article lists ten questions spanning phishing, vishing, and physical pentesting that help organizations get more from their testing.

NetSPI updates its social engineering offerings with adversarial techniques mimicking real-world phishing and vishing, giving organizations a realistic assessment of human-layer defenses.

A red team engagement against a bank's voice biometric helpdesk: collecting training data, training an AI model and generating synthetic audio to bypass voice authentication with a deep fake.

NetSPI describes a black box red team engagement for a major US bank's subsidiary: OSINT and a robo-caller vishing attack harvested employee credentials used to attempt VPN access to the network.