Report by Google (government-backed threat actor use of the Gemini): cloud.google.com/blog/topics/...

2 additional reports on how GenAI has been used in social engineering attacks. They provide a more holistic understanding on how these tools are being used by adversaries:

Report by Anthropic (Claude): www.anthropic.com/news/detecti...

🔹 I know that some of you in my network (and some of our clients) had to deal with the attacks documented. This will hit home.

🔹 Ultimately, we can use this report help us further improve our defense strategies with reality in mind.

🔹 The operations described in the report help give us a better understanding of how threat actors are *realistically* trying to abuse GenAI models. No guesses, no fancy assumptions, just the observed TTPs.

Always fun hanging out with you @cyber.coffee! 🙌🏻

Note: HUMINT in CTI is not meant to replace the technical analysis, but to complement it. It fills in gaps with intel that cannot be found through the technical analysis or other passive intel disciplines - e.g. motives, future targets, skill/group developments, future plans, etc

Class Details & Registration:
www.x33fcon.com?fbclid=IwAR2...

...and of course:

🔹 Blue Team Countermeasures: How to disrupt social engineering attacks & create a defense strategy.

...but there will also be some surprises 🤫 ✨ ✨

If you're attending #x33fcon this year I look forward to seeing you there! 👋🏻

🔹 The use of AI in all phases of the social engineering kill-chain.

🔹 OSINT: How to conduct reconnaissance on a target (business / person) and what to look for.

🔹 Highly practical open-source intelligence (OSINT) tools & techniques that facilitate attack scenarios.

We will cover:

🔹 Timeless Social Engineering Attack Scenarios: The tricks that keep working (and why).

🔹 The Psychology behind social engineering (we will go well beyond influence tactics!!)

🔹 Hybrid & advanced attack techniques that combine multiple attack verticals.

Sure, there is no perfect OPSEC, and there is no perfect intelligence department. However, that a pretty major error and we can all learn from it.

🔹️ The fact that experienced, OPSEC-aware, national-security leaders in this administration don't act with security in mind, which we can assume happens in more than one ways. Even on such a fundamental level.

Overall, this report is worth a read. If you are interested in the topic don't forget to check out the referenced resources within the report