[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foQXR9aF2no6M_phyqXBW6GeCm9LrZBJHzfuBE1xxpfk":3},{"article":4,"iocs":54,"watch_terms":58,"solutions":59,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"cf603168-2085-402f-afa8-32f6b43bae88","Social Engineering Detection Moves Into the Live Conversation","social-engineering-detection-moves-into-the-live-conversation-1fd609","Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering. The post Social Engineering Detection Moves Into the Live Conversation appeared first on SecurityWeek.","Traditional security awareness training has proven ineffective against social engineering attacks, which continue to succeed using sophisticated methods like AI deepfakes and vishing. Recent breaches at MGM Resorts and Caesars Entertainment highlight the significant financial and data loss from such attacks. Netarx has developed an AI-driven solution that analyzes communication signals in real-time to detect both traditional and AI-generated social engineering attempts, providing users with a color-coded indicator of potential threats.","New AI-powered technology aims to detect social engineering in live conversations.","https:\u002F\u002Fwww.securityweek.com\u002Fsocial-engineering-detection-moves-into-the-live-conversation\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F06\u002FDeepfake-voice.jpg","2026-10-06T08:38:14+00:00","2026-10-06T10:00:27.525456+00:00",7,[17,20,23,25,28],{"name":18,"type":19},"Microsoft Entra","product",{"name":21,"type":22},"Scattered Spider","threat_actor",{"name":24,"type":22},"ShinyHunters",{"name":26,"type":27},"Netarx","vendor",{"name":29,"type":30},"Las Vegas casino breaches","campaign","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":31,"icon":33,"name":34,"slug":35},null,"Threat Intelligence","threat-intelligence",[37,42,47,52],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":48},{"id":49,"icon":33,"name":50,"slug":51},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":53},{"id":31,"icon":33,"name":34,"slug":35},[55],{"type":56,"value":24,"context":57},"malware","Threat actor associated with the Brinks Home leak involving voice phishing.",[26,18],{"controls":60,"vendors":139},[61,90,112],{"slug":62,"name":63,"problem":64,"products":65},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[66,74,82],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"slug":91,"name":92,"problem":93,"products":94},"deception","Deception and honeypots","An attacker who gets in quietly can explore the network for weeks before any alarm goes off.",[95,103,104],{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"thinkst-canary","Thinkst Canary","\u002Fvendor-logos\u002Fthinkst-canary.png","canarytokens","Canarytokens","https:\u002F\u002Fcanarytokens.org\u002F","Free tripwires, such as fake documents, cloud keys, web links and DNS names, that notify you when an attacker opens or uses them.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"zscaler","Zscaler","\u002Fvendor-logos\u002Fzscaler.png","zscaler-deception","Zscaler Deception","https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fdeception-technology","Decoys built into the Zscaler platform that turn any attacker interaction into a confirmed alert.",{"slug":113,"name":114,"problem":115,"products":116},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[117,125,132],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":126,"product_name":129,"url":130,"description":131},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":113,"product_name":136,"url":137,"description":138},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",[],{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":155},"ai-powered-social-engineering-defeats-traditional-security-training","AI-Powered Social Engineering Defeats Traditional Security Training","Traditional security awareness training has failed to keep pace with increasingly sophisticated social engineering tactics, including AI-generated deepfakes and voice phishing (vishing), as demonstrated by the high-profile breaches at MGM Resorts and Caesars Entertainment that resulted in massive financial losses and data exposure. Attackers exploit human psychology in real-time conversations, where employees have little time to critically evaluate authenticity — a gap that static training programs cannot adequately address. The emergence of AI-driven detection tools that analyze live communication signals represents a necessary evolution in defense strategy. This matters because no technical control alone can substitute for empowered, in-the-moment human decision-making supported by intelligent tooling.",[145,146,147,148,149,150,151,152,153,154],"CIS Control 14: Security Awareness and Skills Training","CIS Control 6: Access Control Management","NIST SP 800-50: Building an Information Technology Security Awareness and Training Program","NIST SP 800-61: Computer Security Incident Handling Guide","NIST AC-2: Account Management","NIST IA-3: Device Identification and Authentication","NIST IR-6: Incident Reporting","GDPR Article 32: Security of Processing","ITIL Service Desk Security Verification Practices","MITRE ATT&CK T1566: Phishing \u002F T1598: Vishing",{}]