Rachel Tobac
banner
racheltobac.bsky.social
Rachel Tobac
@racheltobac.bsky.social
Hacker & CEO @SocialProofSec security awareness/social engineering training, videos, talks | 3X @DEFCON🥈 | Ex Chair @WISPorg | Ex @CISAgov Technical Advisory Council under Director Jen Easterly
Reposted by Rachel Tobac
Signal will never message you like this.

If you get a message like this, SOMEONE IS TRYING TO HACK YOUR SIGNAL.

DO NOT GIVE THEM THAT CODE.
January 26, 2026 at 2:16 AM
Reposted by Rachel Tobac
WARNING, fellow journalists: As @nicoschmidt.io explains, attackers are trying to hijack reporters' Signal accounts by tricking people into handing over their 2FA codes. www.linkedin.com/posts/nicosc...
January 28, 2026 at 7:49 PM
If you’re an activist, journalist, exec, or have a high threat model for any other reason, I do recommend using all tools to protect against spyware including Apple’s lockdown mode and WhatsApp’s new Strict Account Settings. Thanks WhatsApp for the partnership to get the word out to folks.
January 27, 2026 at 3:46 PM
The repairable, customizable, build-it-yourself, physical webcam & mic kill switch, Linux compatible, port swappable @frame.work laptop has hit the SocialProof office 🤖🤘
January 14, 2026 at 4:47 PM
Reposted by Rachel Tobac
Great work from @racheltobac.bsky.social, with @cnn.com: How the latest deepfake scam can cheat companies out of millions. Good one to share with your company, and with friends & loved ones. edition.cnn.com/2025/10/07/b... cc @craignewmark.bsky.social @pausetake9.bsky.social @gate15.bsky.social
How the latest deepfake scam can cheat companies out of millions | CNN Business
From CEOs to colleagues, deepfake technology can trick people into sending money, sharing passwords, or revealing sensitive information - all in seconds. CNN’s Clare Duffy met with ethical hacker and ...
edition.cnn.com
October 10, 2025 at 11:42 AM
Reposted by Rachel Tobac
An totally entertaining, and informative interview with @racheltobac.bsky.social and Scammer Payback about hacking and handling your online privacy in the new epoch of AI. youtu.be/xEdZwLRJttQ?...
Social Engineer: YOU are Easier to Hack than your Computer
YouTube video by Scammer Payback
youtu.be
October 13, 2025 at 9:57 AM
Reposted by Rachel Tobac
Episode 22: Social Engineering, Gas Mark 4, and AGAs with Rachel Tobac!

@tib3rius.bsky.social & @swiftsecur.bsky.social are joined by @racheltobac.bsky.social to talk social engineering war stories...and more!

Links below!
October 24, 2025 at 2:01 PM
Reposted by Rachel Tobac
“The consumer’s son has been interacting with an AI chatbot called ChatGPT, which is advising him not to take his prescribed medication and telling him that his parents are dangerous,” reads the FTC’s summary of one of the calls.
People Who Say They’re Experiencing AI Psychosis Beg the FTC for Help
The Federal Trade Commission received 200 complaints mentioning ChatGPT between November 2022 and August 2025. Several attributed delusions, paranoia, and spiritual crises to the chatbot.
www.wired.com
October 22, 2025 at 1:37 PM
Reposted by Rachel Tobac
Hey @racheltobac.bsky.social you're probably going to need to hire a lot more people for all the new clients you're about to get.
This is the future of Windows. Microsoft wants to rewrite Windows to turn computers into AI PCs that you talk to. It's now bringing AI features to all Windows 11 PCs today, in a bid to convince you to talk to your PC and let AI control it. Full details 👇 www.theverge.com/news/799768/...
Microsoft wants you to talk to your PC and let AI control it
Copilot Voice and Vision are now rolling out.
www.theverge.com
October 16, 2025 at 3:53 PM
*My Latest CNN Zoom Call Deepfake Demo*
An eng org sent $25M to scammers who deepfaked the CFO in a live video call.
Are your colleagues, fam & friends ready to catch this AI attack?
I demo'd a live Zoom deepfake to CNN's Clare Duffy to help you spot the signs:
edition.cnn.com/2025/10/07/b...
How the latest deepfake scam can cheat companies out of millions | CNN Business
From CEOs to colleagues, deepfake technology can trick people into sending money, sharing passwords, or revealing sensitive information - all in seconds. CNN’s Clare Duffy met with ethical hacker and ...
edition.cnn.com
October 9, 2025 at 4:04 PM
Reposted by Rachel Tobac
Two of our tech reporters tested out Sora, a smartphone app made by OpenAI that lets people create videos entirely from A.I. “It is, in effect, a social network in disguise; a clone of TikTok down to its user interface, algorithmic video suggestions and ability to follow and interact with friends.”
OpenAI’s New Video App Is Jaw-Dropping (for Better and Worse)
www.nytimes.com
October 2, 2025 at 9:12 PM
Reposted by Rachel Tobac
"It makes it really easy to create a believable deepfake in a way that we haven’t quite seen yet."
-- @racheltobac.bsky.social, CEO of SocialProof Security, a cybersecurity start-up in San Francisco
Two of our tech reporters tested out Sora, a smartphone app made by OpenAI that lets people create videos entirely from A.I. “It is, in effect, a social network in disguise; a clone of TikTok down to its user interface, algorithmic video suggestions and ability to follow and interact with friends.”
OpenAI’s New Video App Is Jaw-Dropping (for Better and Worse)
www.nytimes.com
October 2, 2025 at 11:12 PM
Reposted by Rachel Tobac
@racheltobac.bsky.social new threat model for businesses? 😬😵‍💫
New: landlords are demanding potential tenants hand over employer login credentials so a tool can verify their income. We were sent screenshot of the tool, Argyle, downloading much more data than necessary to approve the renter. "Opt-out means no housing" www.404media.co/landlords-de...
Landlords Demand Tenants’ Workplace Logins to Scrape Their Paystubs
Screenshots shared with 404 Media show tenant screening services ApproveShield and Argyle taking much more data than they need. “Opt-out means no housing.”
www.404media.co
September 29, 2025 at 3:19 PM
Reposted by Rachel Tobac
This should be mandatory watch by everybody who has a phone and or email. @racheltobac.bsky.social shows how vulnerable we all are to getting hacked through social engineering and with gAI tools it's only gotten easier.
Social Engineer: YOU are Easier to Hack than your Computer
YouTube video by Scammer Payback
www.youtube.com
September 17, 2025 at 12:47 PM
Reposted by Rachel Tobac
I only watched this today, but I enjoyed it immensely. So many security lessons in a very entertaining package. 😊
*New live hack demo - stealing security question answers w/ AI voice clones*
At @defcon.bsky.social I went on ScammerPayback podcast and hacked the host by calling his friends & stealing answers to his bank's password reset questions using a voice clone w/in 10 secs.
www.youtube.com/watch?v=xEdZ...
Social Engineer: YOU are Easier to Hack than your Computer
YouTube video by Scammer Payback
www.youtube.com
September 10, 2025 at 12:09 PM
Reposted by Rachel Tobac
🪞Does ChatGPT think you're perfect? You're not alone.

🎧 On this week's episode of The AmberMac Show podcast, @racheltobac.bsky.social and I chat about the sycophantic nature of this popular tool.

Listen to the full episode here:
bio.site/ambermac
September 6, 2025 at 6:28 PM
Reposted by Rachel Tobac
💻 When I need to learn more about AI safety & security, I ask @racheltobac.bsky.social.

You may have seen her on 60 Minutes.

I met Rachel when I interviewed former FBI Director James Comey at an event (we all had dinner the eve before, that's a whole other story!).

www.youtube.com/watch?v=cule...
AI Safety & Security with Ethical Hacker Rachel Tobac [The AmberMac Show Ep029]
YouTube video by Amber Mac
www.youtube.com
September 6, 2025 at 12:11 PM
Reposted by Rachel Tobac
🥺 Are chatbots dangerous for our kids?

🎙️ We are dedicating this week's new episode of The AmberMac Show podcast, out today, to this topic 👇
bio.site/ambermac

@racheltobac.bsky.social on some of these risks

@jeffmacarthur.bsky.social on the dangers of chatbots becoming a "mentor" in the home
September 3, 2025 at 12:02 PM
Reposted by Rachel Tobac
Great interview with @racheltobac.bsky.social shining a light in a lot of important topics, like what are likely attack vectors, impact of #AI on #security, #ethics, affecting social interactions and #privacy .

"Be politely paranoid." 👏

www.youtube.com/watch?v=xEdZ...
Social Engineer: YOU are Easier to Hack than your Computer
YouTube video by Scammer Payback
www.youtube.com
September 2, 2025 at 11:15 AM
Reposted by Rachel Tobac
If you want to learn more on how easy these things are these days especially given AI tooling, I recommend following @racheltobac.bsky.social and her fabulous work on social engineering. Learned a bunch from her and her demonstrations. Latest video I loved: youtu.be/xEdZwLRJttQ
Social Engineer: YOU are Easier to Hack than your Computer
YouTube video by Scammer Payback
youtu.be
August 30, 2025 at 7:45 PM
Reposted by Rachel Tobac
This was a VERY eye opening and informative interview that is worth watching!
*New live hack demo - stealing security question answers w/ AI voice clones*
At @defcon.bsky.social I went on ScammerPayback podcast and hacked the host by calling his friends & stealing answers to his bank's password reset questions using a voice clone w/in 10 secs.
www.youtube.com/watch?v=xEdZ...
Social Engineer: YOU are Easier to Hack than your Computer
YouTube video by Scammer Payback
www.youtube.com
August 28, 2025 at 11:38 AM
Reposted by Rachel Tobac
Definitely worth a look. Scary world we live in at the moment 😱 When do people wake up - What can we do 🤔?
*New live hack demo - stealing security question answers w/ AI voice clones*
At @defcon.bsky.social I went on ScammerPayback podcast and hacked the host by calling his friends & stealing answers to his bank's password reset questions using a voice clone w/in 10 secs.
www.youtube.com/watch?v=xEdZ...
Social Engineer: YOU are Easier to Hack than your Computer
YouTube video by Scammer Payback
www.youtube.com
August 21, 2025 at 5:01 PM
*New live hack demo - stealing security question answers w/ AI voice clones*
At @defcon.bsky.social I went on ScammerPayback podcast and hacked the host by calling his friends & stealing answers to his bank's password reset questions using a voice clone w/in 10 secs.
www.youtube.com/watch?v=xEdZ...
Social Engineer: YOU are Easier to Hack than your Computer
YouTube video by Scammer Payback
www.youtube.com
August 21, 2025 at 3:32 PM
Live from New York it’s hackers at Nasdaq! Great to go live with @davegerryjr.bsky.social @bugcrowd.com in Times Square today to talk ethical hacking, security and AI!
August 19, 2025 at 6:17 PM