Security Starts With You: Social Engineering
summary
Social engineering is an attempt to acquire sensitive information for malicious reasons through deception, not a vague “awareness” problem; examples include tailgating to gain physical access, spearphishing that tricked a finance staffer at Pivotal into sending employee tax files, and an academic test that dropped ~300 USBs to show how many get picked up (USB baiting). Ransomware drives real costs (CNBC cites ~$209M US losses), so recurring bite‑sized training, enforced two‑factor auth and internal simulated attacks that measurably reduce clicks are practical defenses against angler phishing and pretexting.
AI-written summary · about
chapters (21)
- 0:00Intro
- 1:20What is Social Engineering
- 2:35tailgating
- 3:48risks
- 4:37it works
- 6:06Phishing
- 10:50Ransomware
- 12:31Phishing Email
- 14:25Pretexting
- 14:45Frank Bagnale Jr
- 15:55Grandma Scans
- 16:47Cold Calls
- 17:40Pre pretexting
- 18:34USB drives
- 18:56Personal vigilance
- 19:31Why do companies fail
- 20:06Training people is expensive
- 20:21How do we change
- 20:48Classroom and video training
- 21:32Email security
- 24:03Twofactor authentication
related talks
35mProtecting the Organization: The Psychology of Social Engineering
41mHacking Humans : Social Engineering Techniques and How to Protect Against Them
25mHacking the human mind: The rise of social engineering security threat
44mHacking Humans: Social Engineering Techniques
50mHacking Humans : Social Engineering Techniques and How to Protect Against Them
55mHacking Humans
55mSocial Engineering Overview-How To Prevent Your Co. from Getting Hacked
51mSocial Engineering: Hacking People