Ep. 17 Hacking Humans: What is Social Engineering?

Hosts Annie-Mei and Anika unpack social engineering or “human hacking”, with insights from books by Chris Hadnagy and Kevin Mitnick. They break down the attack lifecycle, common tactics (phishing, pretexting, tailgating, quid pro quo), and how AI is supercharging scams, then share practical defences: pause-and-verify, reduce digital footprints, and normalise double-checking at work and home. A clear, actionable guide to spotting and resisting manipulation online and off. 

Practical takeaways

• Pause and verify: If there’s urgency, slow down. Confirm via a second channel (Teams/Slack/phone) using contact details you already trust.
• Know your own levers: List your motivations and soft spots (travel deals, pets, promotions, family). Expect lures to target them.
• Harden your photos & profiles: Ask permission before posting others; avoid location tags; check backgrounds for whiteboards, monitors, ID, or addresses.
• At the door: Challenge tailgating politely; ask for ID and verify with the office before granting access—even to someone in high-vis.
• At work: Prefer frequent, tailored awareness over once-a-year training; normalise “it’s fine to check with me” in leadership; run realistic simulations.
• At home: Talk with family and friends about what not to share on your behalf.

Resources for further education:

• Chris Hadnagy — Social Engineering: The Science of Human Hacking
• Kevin Mitnick — The Art of Deception; The Art of Invisibility

Find us on Instagram and YouTube @thecybersecuritygals