Social Engineering Like You’re Picard
Demonstrates how generative AI tools enhance phishing and vishing operations and outlines strategies to build organizational situational awareness.
Summary
The AI Revolution in Social Engineering
Generative AI tools such as ChatGPT, Gemini, and Copilot enable attackers to rapidly generate highly authentic pretexting materials, personalized phishing lures, and believable synthetic vishing dialog.
Simulating Next Generation Attack Campaigns
Red team practitioners leverage AI assistants to craft sophisticated phishing infrastructure, automate reconnaissance on targets, and adapt communication styles dynamically.
Transitioning from Security to Situational Awareness
Traditional compliance-focused security awareness training fails to prepare employees for adaptive AI threats. Organizations must cultivate an active situational awareness mindset.
Turning Threats into Teachable Moments
Adversarial simulations should be used constructively to empower staff, identify organizational blind spots, and foster a supportive security culture.
Related talks
Daniel Isler
Applying photojournalism principles and invisible theater to seize decisive moments in physical social engineering.
Creator Stage·19 min
Katherine Rackliffe
Presents empirical results from a university research study evaluating user vulnerability and defensive safeguards against AI voice-cloned vishing attacks.
Main Stage·43 min
Keanu Nys
Demonstrates how red teams can abuse legitimate Microsoft login branding parameters and OAuth endpoints to host convincing, high-trust phishing infrastructure.