Ep. 286 - Human Element Series - 2024 - Year of the SE
Dec 9, 2024
auto_awesome
This wrap-up dives into the alarming rise of security breaches, particularly vishing and its implications. A poignant discussion highlights the Innocent Lives Foundation's crucial role in combating child exploitation. Major data breaches affecting millions, including Ticketmaster, are scrutinized. The hosts reflect on impactful topics from the past year, celebrating achievements while reminding everyone to stay vigilant against social engineering threats, especially during the holiday season.
Vishing has become a significant cybersecurity threat, emphasizing the need for companies to implement proactive training and simulations for employees.
The year saw unprecedented data breaches affecting millions, highlighting the critical importance of accountability and robust security practices in protecting sensitive information.
Deep dives
The Rise of Vishing and Cyber Threats
Vishing, or phone phishing, has emerged as a predominant threat in cybersecurity, with companies vulnerable to attacks that impersonate trusted sources. An example is the callback phishing simulation service that educates employees on recognizing and reporting such threats, reinforcing the need for proactive security measures. As security breaches escalate, recent incidents underscore the importance of protecting sensitive information and providing thorough training for staff. Companies are encouraged to adopt comprehensive security strategies that include regular simulations to prepare for real-world attacks.
Major Data Breaches of the Year
The year saw some of the largest data breaches in history, with Ticketmaster experiencing a major breach affecting over 560 million users, compromising personal and financial details. Additionally, the National Public Data breach impacted over 3 billion records, raising concerns about the accountability of companies handling sensitive information. The breaches highlighted the vulnerabilities in the systems of major firms like AT&T, which reported its own significant breaches, putting customer data at risk, especially for sensitive populations. A call for holding companies accountable for their data practices is crucial to prevent future incidents.
Growth and Educational Initiatives in Social Engineering
The podcast experienced significant growth, producing 44 original episodes and reaching nearly 175,000 downloads, illustrating a burgeoning interest in social engineering topics. Educational initiatives included conducting classes on social engineering and launching an online course on information elicitation to equip participants with practical communication skills. Events such as the Ubicon conference fostered discussions on human behavior and social engineering, engaging industry professionals in meaningful learning opportunities. Plans for continued expansion in 2025 signal a commitment to further educational pursuits and community involvement.
Welcome to the Social-Engineer Podcast: The Human Element Series. Today is our 2024 year-end wrap up, where we’ll revisit some of the biggest stories of the past year as well as talk about some of our company’s highlights. [Dec 9, 2024]