You Can't Go To Windows Update And

I Can Go Into Linkedin And Search For Network Engineers And Come Up With A List Of Great Spear-phishing Targets Because They Usually Have Administrator Rights Over The Network. Then I Go Onto Twitter Or Facebook And Trick Them Into Doing Something, And I Have Privileged Access.

We Have Problems With Our Physical Security, Operational Security Through To Management.

The Key To Social Engineering Is Influencing A Person To Do Something That Allows The Hacker To Gain Access To Information Or Your Network.

It Doesn't Work The Same Way Everywhere. The Americans Are The Most Gullible, Because They Don't Like To Deny Co-workers' Requests. People In The Former Soviet Bloc Countries Are Less Trusting, Perhaps Because Of Their Previous Experiences With Their Countries' Secret Services.

Social Engineering Is Using Manipulation, Influence And Deception To Get A Person, A Trusted Insider Within An Organization, To Comply With A Request, And The Request Is Usually To Release Information Or To Perform Some Sort Of Action Item That Benefits That Attacker.