Even the most well-meaning cybersecurity laws and procedures can be subverted by a sufficiently devious mind, and there’s no better place to learn how they do it than Black Hat USA this summer. In fact, there’s a whole Human Factors track at the event that is dedicated to how human decisions affect the security of your organization, and how engineering and technology can help.
GDPArrrrr: Using Privacy Laws to Steal Identities is a good example. It’s a 50-minute Briefing about how the General Data Protection Regulation’s “Right of Access” provision (which gives individuals the right to access their personal data) can be easily abused by social engineers to steal sensitive information.
After a survey of more than 150 companies, a security researcher will demonstrate that organizations willingly provide highly sensitive information in response to GDPR right of access requests with little or no verification of the individual making the request, providing one of the most reliable general phishing attack typologies to date.
In Deconstructing the Phishing Campaigns that Target Gmail Users you’ll get a rare inside look at Gmail telemetry to illuminate the differences between phishing groups in terms of tactics and targets. Then, leveraging insights from the cognitive and neuro-science fields on user's susceptibility and decision-making, you’ll learn why different types of users fall for phishing and how those insights can be ..
Support the originator by clicking the read the rest link below.
