Offensive Security
What is Social Engineering?
Social engineering is the manipulation of people into divulging confidential information or performing actions that compromise security, exploiting human trust rather than technical flaws. It matters because even strong technical controls can be bypassed when an attacker convinces an employee to grant access or reveal credentials.
Example
An attacker calls a help desk pretending to be a locked-out executive and persuades staff to reset a password without proper verification.
Reference: CISA ↗
Related Clear Infosec services
Related terms
Have a question about social engineering in your environment? Talk to our team.