Leading Financial Institution Leveraged NetSPI Red Team Service to Improve Their Security Posture

Real social engineering engagement stories: an open SMTP relay let testers phish from the company's own domain, plus vishing lessons and practical tips to strengthen organizational defenses.

Social engineering remains the top way attackers gain entry. This article lists ten questions spanning phishing, vishing, and physical pentesting that help organizations get more from their testing.

Modern AI voice cloning needs only a minute or two of audio to produce realistic replicas. The article examines real-time impersonation risks, NetSPI's cloner testing tool, and mitigations.

NetSPI updates its social engineering offerings with adversarial techniques mimicking real-world phishing and vishing, giving organizations a realistic assessment of human-layer defenses.

Describes how attackers can submit phishing domains to web content filter categorization services so corporate filters whitelist the sites, improving success rates in phishing engagements.

ClickOnce deployment, built for easy Windows app installs, doubles as a phishing vector: one click can grant a malicious payload temporary admin privileges, controlled by registry trust settings.