Another sabotage incident targeting Germany's railway infrastructure. An extremist group claimed responsibility for this one. The group published details about the attack online, including the targeted locations and the methods they used. 🧵

The two keynote speakers this year: @christinalekati.bsky.social with "The Social Engineering Threat Landscape: Campaigns, Actors, and Emerging Trends" - Fri 1:00 pm @webbreacher.com with "Become a Creator -- Building the Community That Builds OSINT" - Sat 1:30 pm layer8conference.com

The Layer 8 Conference is this week! Friday, Saturday in Boston. Two tracks, OSINT and Social Engineering. Two keynotes with @christinalekati.bsky.social and @webbreacher.com. We'll have SockPuppet, OSINT Industries and Maltego leading off the partners hall. layer8conference.com

This June, together with the @layer8conference.com we offer a true deep-dive in social engineering! Join us for a 2-day hands-on training followed by a conference focusing exclusively on Social Engineering & OSINT! 🙌🏻⬇️

Layer 8 Conference and Podcast@layer8conference.com · 3mo ago

Looking for Social Engineering or OSINT training? June 3-4 in Boston! @christinalekati.bsky.social with "Social Engineering for Security Teams" @technisette.bsky.social and @webbreacher.com with OSINT Training. Free conference ticket included! layer8conference.com

Here is @layer8conference.com giving you an amazing reason to come and learn #socialengineering with us! I can't wait to join the conference and teach this class!!

Layer 8 Conference and Podcast@layer8conference.com · 3mo ago

Want to learn social engineering? On June 3-4 in Boston, @christinalekati.bsky.social is teaching her Social Engineering for Security Teams class. Even better, if you take this class, you get a ticket to Layer 8 Con included! More info and registration here: layer8conference.com/conference-t...

Postcards from #BlackHatAsia and Singapore! Always grateful to have the opportunity to teach in such diverse, multicultural classes. A big thank you to everyone who joined us, shared their perspectives, asked questions, and spent 2 days learning and working on their investigative skills with us!

Only 5 weeks left until the next open class "𝐒𝐨𝐜𝐢𝐚𝐥 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫𝐢𝐧𝐠 𝐟𝐨𝐫 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐓𝐞𝐚𝐦𝐬" that is going to happen in-person at the @layer8conference.com in Boston (US)! ***There will also be a FREE conference ticket for all participants attending a training!***

We know it happens, we talk about it in training, yet there is always a veil of doubt. Here is a rare public account of a #socialengineering op that started IN-PERSON & in a targeted way, ran for about 6 months, & cost Drift (a Solana-based DEX) $285 Million. This is a truly sophisticated attack.🧵

Want a free ticket to Layer 8 Con? Sign up for "Social Engineering for Security Teams" by @christinalekati.bsky.social! A two-day immersive hands-on class that will teach all aspects of social engineering testing! layer8conference.com www.zeffy.com/en-US/ticket...

VERY excited that I’ll be part of the @layer8conference.com this year delivering a keynote and a 2-day training class on Social Engineering! Looking forward to meeting the Social Engineering & OSINT community in Boston. This will be fun! ✌🏻

Layer 8 Conference and Podcast@layer8conference.com · 5mo ago

Exciting announcement! Christina Lekati @christinalekati.bsky.social will be a keynote speaker at the Layer 8 Conference this year and teaching "Social Engineering for Security Teams"! Get to know her today's Layer 8 Podcast! open.spotify.com/episode/6oE2...

If you think AI and deepfakes are THE name of the game in "sophisticated" social engineering attacks, think again. AI-gen deepfakes are often just one step (a final blow) in a larger social engineering kill-chain. In this week's SE case, we see a layered intrusion. cloud.google.com/blog/topics/...

UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering | Google Cloud Blog

North Korean threat actors target the cryptocurrency industry using AI-enabled social engineering such as deepfakes, and ClickFix.

cloud.google.com

𝐎𝐮𝐫 "𝐅𝐮𝐧𝐝𝐚𝐦𝐞𝐧𝐭𝐚𝐥𝐬 𝐨𝐟 𝐂𝐲𝐛𝐞𝐫 𝐈𝐧𝐯𝐞𝐬𝐭𝐢𝐠𝐚𝐭𝐢𝐨𝐧𝐬 𝐚𝐧𝐝 𝐇𝐮𝐦𝐚𝐧 𝐈𝐧𝐭𝐞𝐥𝐥𝐢𝐠𝐞𝐧𝐜𝐞" 𝐜𝐥𝐚𝐬𝐬 𝐢𝐬 𝐫𝐞𝐭𝐮𝐫𝐧𝐢𝐧𝐠 𝐭𝐡𝐢𝐬 𝐬𝐩𝐫𝐢𝐧𝐠 𝐭𝐨 @blackhatevents.bsky.social 𝐀𝐬𝐢𝐚 𝐢𝐧 𝐒𝐢𝐧𝐠𝐚𝐩𝐨𝐫𝐞! 🎉 For details & registrations: blackhat.com/asia-26/trai...

Berlin was faced with a 2nd arson attack on their power grid within a few months, leaving thousands of households without power, for days. Several systems were damaged simultaneously deeming any backup systems, ineffective. An attack like this requires some reconnaissance. 🧵

3 resources in 1 post: Open AI has released a new report outlining the ways in which threat actors used their generative AI products to support their social engineering attack operations. They provide the case studies. openai.com/global-affai... Why is this useful? 🧵

Disrupting malicious uses of AI: June 2025

Our latest report featuring case studies of how we’re detecting and preventing malicious uses of AI.

openai.com

Happy news!! This September at @brucon we will be taking a deep dive into #socialengineering and #OSINT through a 3-day, hands-on training class! I SO look forward to it and to meeting the participants!! 🤩👩🏻‍💻 Full class content & details: www.brucon.org/training-det...

Very grateful for last week spent at X33fcon in Poland! It started with 2 days full of #socialengineering & #OSINT training where I had the privilege to teach a class that was present, curious, and ready to try things out. Big bonus: reconnecting with friends during the conference days afterwards😊

Agentic AI has opened new frontiers for adversaries looking to automate and scale attacks. I wrote an article explaining what Agentic AI really is & how it can shape the future of the social engineering threat landscape. christina-lekati.medium.com/when-ai-goes...

When AI Goes Rogue: How Agentic AI Will Reshape Social Engineering Attacks

Cyber criminals are rarely late to the game when it comes to new technologies. In fact, they’re often among the first ones to experiment…

christina-lekati.medium.com

Agentic AI has opened new frontiers for adversaries looking to automate and scale attacks. I wrote an article explaining what Agentic AI really is & how it can shape the future of the social engineering threat landscape. christina-lekati.medium.com/when-ai-goes...

When AI Goes Rogue: How Agentic AI Will Reshape Social Engineering Attacks

Cyber criminals are rarely late to the game when it comes to new technologies. In fact, they’re often among the first ones to experiment…

christina-lekati.medium.com

There are a few things different this time around. 👇🏻 New class modules: 🔸️State-Sponsored social engineering schemes 🔸️Using AI for OSINT tasks (responsibly) 🔸️How attackers are using AI to supercharge their SE. Hands-on, practical & realistic. See you at x33fcon in only 4 weeks! 😱🥳

Christina Lekati@christinalekati.bsky.social · last yr.

Surprise! Really excited to announce that the next "𝑺𝒐𝒄𝒊𝒂𝒍 𝑬𝒏𝒈𝒊𝒏𝒆𝒆𝒓𝒊𝒏𝒈 & 𝑶𝒑𝒆𝒏-𝒔𝒐𝒖𝒓𝒄𝒆 𝑰𝒏𝒕𝒆𝒍𝒍𝒊𝒈𝒆𝒏𝒄𝒆 𝒇𝒐𝒓 𝑺𝒆𝒄𝒖𝒓𝒊𝒕𝒚 𝑻𝒆𝒂𝒎𝒔" open class will be happening at x33fcon in Gdynia, Poland!! This is an intensive, 2-day training 🧵

If you are using #HUMINT techniques in your #CTI process, this is a talk worth watching. Eliska & Julien do a great job in breaking down important concepts, risks, benefits & analytical aspects of using HUMINT tactics in a CTI workflow ⬇️ youtu.be/o1TTO5d1DXQ?...

It's so overt it's covert: leveraging classic HUMINT tactics in CTI investigations

YouTube video by SANS Digital Forensics and Incident Response

youtu.be

New blog: The Slow Collapse of Critical Thinking in OSINT due to AI "OSINT used to be a thinking game. Now it’s becoming a trusting game and that should terrify you." #OSINT #OSINT4good #AI Read the blog here: www.dutchosintguy.com/post/the-slo...

Surprise! Really excited to announce that the next "𝑺𝒐𝒄𝒊𝒂𝒍 𝑬𝒏𝒈𝒊𝒏𝒆𝒆𝒓𝒊𝒏𝒈 & 𝑶𝒑𝒆𝒏-𝒔𝒐𝒖𝒓𝒄𝒆 𝑰𝒏𝒕𝒆𝒍𝒍𝒊𝒈𝒆𝒏𝒄𝒆 𝒇𝒐𝒓 𝑺𝒆𝒄𝒖𝒓𝒊𝒕𝒚 𝑻𝒆𝒂𝒎𝒔" open class will be happening at x33fcon in Gdynia, Poland!! This is an intensive, 2-day training 🧵

Not that hotel rooms have the best locking mechanisms, but leaving a room fully accessible after exiting is a whole other level. Check your doors when you leave, people.

A WIRED must-read today on Boeing by @laurensmiley.bsky.social:

The Worst 7 Years in Boeing’s History—and the Man Who Won’t Stop Fighting for Answers

Fatal crashes. A door blowout. Grounded planes. Inside the citizen-led, obsessive campaign to hold Boeing accountable and prevent the next disaster.

wired.com

Switzerland mandates 24-hour cyberattack reporting for critical infrastructure operators from April

Switzerland mandates 24-hour cyberattack reporting for critical infrastructure operators from April

Switzerland Mandates 24-hour Cyberattack Reporting for Critical Infrastructure, Effective April 1, with Fines Starting October 1.

buff.ly

How can HUMINT be leveraged in Cyber Threat Intelligence? The Dark Overlord investigation is an interesting report showcasing how HUMINT helps better understand threat actor activities, and even infiltrate their inner circles to uncover real identities. Some notes 🧵 nightlion.com/wp-content/u...

„her threat hunters detected the Chinese government goons in federal networks before the far-reaching espionage campaign against people's telecommunications providers had been found and attributed to Salt Typhoon.“ www.theregister.com/2025/01/15/s...

Salt Typhoon spies spotted on US govt networks before telcos

We are only seeing 'the tip of the iceberg,' Easterly warns

theregister.com

"𝑾𝒆𝒍𝒍, 𝑰’𝒎 𝒏𝒐𝒕 𝒓𝒆𝒂𝒍𝒍𝒚 𝒔𝒖𝒑𝒑𝒐𝒔𝒆𝒅 𝒕𝒐 𝒔𝒉𝒂𝒓𝒆 𝒕𝒉𝒊𝒔, 𝒃𝒖𝒕…" Used in social engineering, intelligence collection, & negotiations, elicitation is the subtle art of extracting sensitive information during a seemingly regular conversation. Read more in my new blog: christina-lekati.medium.com/elicitation-...

ELICITATION TECHNIQUES

Covert Information Collection From Human Sources

christina-lekati.medium.com

The new year has come around and we kick it off with 2 new online classes! 🔹 On the 21st of January I will be giving a 4-hour online class on #Elicitation 𝗧𝗲𝗰𝗵𝗻𝗶𝗾𝘂𝗲𝘀. 🔹 On the 28th of January @osintgeek.de will be teaching #Telegram 𝗜𝗻𝘃𝗲𝘀𝘁𝗶𝗴𝗮𝘁𝗶𝗼𝗻𝘀. ⬇️🧵

"𝑾𝒆𝒍𝒍, 𝑰’𝒎 𝒏𝒐𝒕 𝒓𝒆𝒂𝒍𝒍𝒚 𝒔𝒖𝒑𝒑𝒐𝒔𝒆𝒅 𝒕𝒐 𝒔𝒉𝒂𝒓𝒆 𝒕𝒉𝒊𝒔, 𝒃𝒖𝒕…" Used in social engineering, intelligence collection, & negotiations, elicitation is the subtle art of extracting sensitive information during a seemingly regular conversation. Read more in my new blog: christina-lekati.medium.com/elicitation-...

ELICITATION TECHNIQUES

Covert Information Collection From Human Sources

christina-lekati.medium.com