Fire drills are commonplace. We test the alarms, the evacuation procedures and the fire marshals get to practice their roles. In a cyber attack there can be just as much chaos as with a fire, perhaps even more so. This is why incident response is such an important consideration for companies and why, no matter […]
I recently went for a meeting at a company’s office. This company had a few floors in a shared office building. Due to a large amount of black coffee being consumed during the lengthy meeting I needed to find the ladies room before departing. Thankfully there was one in the reception area of the […]
Friday the 8th of March is International Women’s Day. In December 2018 I won the Top 100 Women In Tech Award and the awards process got me thinking about all the amazing women I have met during my journey in the tech sector. We have all had different experiences and have different recipes for success. […]
There has been a lot of media coverage here in the UK about a young woman who previously left the UK as a teenager to go to Syria and join Islamic State. She has recently expressed her desire to return to the UK, causing widespread disagreement as to whether she and her new-born child should […]
I was recently hired to speak at an event in Paris. I love the city however this particular visit was during an unfortunate time. Paris is suffering from some of the worst and most violent rioting in many years. As a social engineer I am interested in human behaviour and one particular area of interest […]
Social engineering is a fascinating and diverse attack vector because it exploits human nature and people are generally predictable in their responses. We focus on malicious social engineering, especially when it facilitates cyber attacks upon organisations. However social engineering and its precursor, the good old ‘con’, is alive and kicking out there on the street […]
Speaking around the world about social engineering one question comes up almost every time. Why is social engineering so successful? A key success factor in a targeted attack is good research, knowing the target and how to manipulate them. I have been gathering and analysing intelligence on people, places and companies for many years now. […]
Here’s a link to an interview with DIGIT who organise the excellent Scot-Secure event in Edinburgh (among many other things). It focuses on social engineering in the context of social media reconnaissance, manipulation and how to minimise your attack surface when using social media. Check it out here
When it comes to reconnaissance and open source intelligence, research often seems like a digital battle. Using endless pieces of software, sites and APIs, we use technology to fight for the data we want. It is easy to forget how much valuable information is out there in the real world, being given away unwittingly, if […]
We recently did a webinar with APMG on why you need to think like a hacker. They have uploaded it to Vimeo, below