$ grep -l "tag:social-engineering" writing/
tag: social engineering.
6 pieces tagged social engineering, newest first. The full taxonomy is on the tag index.
2026·09·27
The 999 lines held: Dyfed-Powys Police and the staff question Dyfed-Powys Police kept 999 and 101 running through a cyber incident and has so far found no evidence the public's data was accessed; staff data is still under investigation. What went right, what "technical difficulties" costs, and why your own people should never hear last. incident response · data protection · social engineering · governance · board
10 min
2026·09·15
Aimed at a person, not a network: Iran's CHOSEN BRICK The NCSC, FBI and AIVD have published a joint advisory on CHOSEN BRICK, Windows malware Iranian state actors use to find, watch and expose dissidents, activists and journalists. A fake MRI result, a fake Norton, a Telegram bot, and a deliberate move from the work laptop to the home one. What it does, how to look for it, and what employers of people at risk should do this week. state-aligned · threat intel · spyware · social engineering · high-risk individuals · board
17 min
2026·07·17
The TfL hackers were teenagers. Unusually, they were caught. Two young Britons — Thalha Jubair, 20, and Owen Flowers, 18 — jailed five and a half years each for the 2024 Transport for London attack: £29m of damage, 148 systems down, done with social engineering. The UK's largest cybercrime case — and, unusually, they were caught. threat intel · law enforcement · social engineering
8 min
2026·07·16
The Qantas breach was a phone call: what we know A living account of the Qantas breach, now pinned on a tech-support scam. No zero-day — a phone call to a contact centre exposed 5.7 million customers. What's confirmed, what's still unproven, and the help-desk controls that actually stop it. Updated as it develops. data breach · social engineering · incident response
10 min
2026·06·02
A Parent's Guide to Spotting Phishing and Social Engineering Your children receive the same phishing messages you do, with less experience recognising them. This guide teaches you what to look for and how to explain it. tutorial · defence · phishing · social-engineering · families · parenting · education
10 min tutorial
2022·04·26
What the teenagers taught the Fortune 500 LAPSUS$ compromised Microsoft, Okta, Nvidia, Samsung, Vodafone, and several others in a few months. They were teenagers using social engineering and MFA fatigue. The lesson, awkwardly, is that the dominant compromise vector in 2022 is social, not technical. incident · social engineering · mfa · governance
8 min
→ all tags · all writing