You Can Trust Me shirt

Product Page

A great shirt for physical penetration testers, just not while they're on the job. 

I found this novel design while searching around for interesting security-related merchandise, and quite by accident I hovered over something and saw Graham Cluley's name pop up because it turns out this is his design. So thank Graham for this, and by thank him, I mean of course buy his shirt. 

That's a nice network you've got there. It'd be a shame if something were to happen to it

from here and here

If you're wondering which came first, my suspicion is that the companies started exploiting fear first. They had a financial incentive whereas early attackers weren't monetizing their attacks and were trying to go unnoticed. Capitalizing on fear draws attention that they didn't want back then. 

Watch this hacker break into a company

Watch on YouTube

Some hackers exploit machines, others exploit people.

Chocolate can get you more than just passwords

found on eBaum's World

It's amazing how far successful one can be with some social engineering, some time, and some treats.

We have seen the vulnerability and it is us

from here and here

When even security researchers are successfully targeted, that's all the proof one should need that no one is immune to social engineering

Will it be a trick or a treat?

found on Huge LOL

This is why it's best to avoid sketchy sites. It's the easiest way to avoid getting bitten.

Because unsuspecting victims aren't looking for "Free Hugs" during a pandemic

found on Memedroid

The bad guys are always adapting so we have to keep on our toes too.

Free skepticism training

found on Piximus

There are all sorts of things that are too good to be true; from the free cuddle tunnel to the free candy van, to free Nigerian prince money, to free wooden horse statues. Have you noticed the commonality? They're all free. Anything of value being offered for free is usually too good to be true. It's enough to make you second guess anything that's free - and perhaps you should.

Stealing your hypothetical money

found on Imgur

I'm sure you've seen something like this too many times. It's not always a ploy to get your social security number, mind you. Sometimes they want the street you grew up on, or your first pet's name, or some other piece of information that would allow them to pretend to be you and gain access to your accounts or your credit or something else of yours that has value.

The ultimate defense

from here

It's amazing how much depends on the security of something many people don't even know is there. I wouldn't want so many of my security outcomes to depend on poorly paid and poorly trained customer service representatives detecting social engineering attacks.

This is how hackers hack you using simple social engineering

Watch on YouTube

I sleep a little easier at night knowing I don't have a cell phone account for someone to do this to, but that's just one kind of account that could be broken into using social engineering. They could get into my ISP account for example, or perhaps (with extra effort) into some kind of financial account like bank or credit card.

Ain't nobody got time for your social engineering

found on Reddit

We all know what's up when some alluring stranger messages us online, and we all lead busy lives, so the bots should cut out the pretense and just get down to business.

That's not suspicious at all

original tweet

Clever of the Marin County Sheriff's Department to not specify which parking lot this was "lost" in. I expect they'll be getting contacted by many different people (both those who have actually lost their meth and those dumb enough to think they can scam the cops).

Now that's what you call a long con

found on Reddit

While this tale may not be true, it's not entirely outside the realm of possibility either. Pretending to be from an official organization is certainly a real thing, and some crooks will even get authentic looking uniforms to help pull off the ruse.

The hardest part of the story to believe is never missing a day of work for 25 years. If there was a con-man who pulled that off, I tempted to say he deserves the money because that is more work and dedication than most legitimate employees display.

Social engineering at it's finest

found on Meme Base

Something tells me there are mobile apps that work off exactly the same principle.

(I feel like the original cartoonist must have a site out there somewhere, but the image doesn't appear to have any identifying info and Google image search returns a lot of matches)

What kind of dope would fall for ... oh

found on Meme Base

What kind of dope would fall for it? Maybe the kind that's high as fuck right now.