Send us fan mail!

Hello to all our cyber squirrels! Joining our series host, Selena Larson, is our co-host today, Tim Kromphardt. Together they welcome our special guest–Dr. Bob Hausmann, Proofpoint's Manager of Learning Architecture and Assessments and a seasoned psychologist.

Our conversation explores how cyber threat actors exploit the different systems of thought in our brains and how attackers leverage our rapid, emotionally-driven responses (system one thinking) to bypass our more deliberate, rational processes (system two thinking).

Dr. Bob introduces us to the concept of cognitive biases, particularly normalcy bias, and how these mental shortcuts can shape our cyber defense strategies. He explains how organizations often fall into the trap of thinking "it won't happen to us," leading to underinvestment in critical security measures. Drawing parallels to historical events like the sinking of the Titanic and the COVID-19 pandemic, he underscores the importance of overcoming these biases to enhance preparedness.

We also talk about:

Real-world implications and examples of social engineering attacks.
The impact of urgency and stress on decision-making in cybersecurity.
The alarming rise and mechanics of pig butchering scams.
The role of AI in scams and cybersecurity
Empathetic approaches to helping scam victims

Resources mentioned:

Book: "Thinking, Fast and Slow" by Daniel Kahneman

Book: "The Art of Deception" by Kevin Mitnick

Previous Discarded Episode on Pig Butchering

Have I Been Pwned

PhishMe

Cybersecurity and Infrastructure Security Agency (CISA)

SANS Institute

https://www.proofpoint.com/us/blog/threat-insight/broken-dreams-and-piggy-banks-pig-butchering-crypto-fraud-growing-online

https://therecord.media/southeast-asian-scam-syndicates-stealing-billions-annually

https://www.cfr.org/in-brief/how-myanmar-became-global-center-cyber-scams

https://www.proofpoint.com/us/blog/threat-insight/dont-answer-russia-aligned-ta499-beleaguers-targets-video-call-requests

For more information about Proofpoint,

Tegus and the Research Stack