[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEa4f8AmVAI7xUMAN5O6_6aT35goaGKircmY6Zks275k":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":22,"status":23,"created_at":24,"published_at":25,"article":26,"tags":30,"podcasts":43,"controls":44},"260a0a56-5da2-4f37-864b-f4f7e9937b89","ai-powered-social-engineering-defeats-traditional-security-training","cf603168-2085-402f-afa8-32f6b43bae88","AI-Powered Social Engineering Defeats Traditional Security Training","Traditional security awareness training has failed to keep pace with increasingly sophisticated social engineering tactics, including AI-generated deepfakes and voice phishing (vishing), as demonstrated by the high-profile breaches at MGM Resorts and Caesars Entertainment that resulted in massive financial losses and data exposure. Attackers exploit human psychology in real-time conversations, where employees have little time to critically evaluate authenticity — a gap that static training programs cannot adequately address. The emergence of AI-driven detection tools that analyze live communication signals represents a necessary evolution in defense strategy. This matters because no technical control alone can substitute for empowered, in-the-moment human decision-making supported by intelligent tooling.","**Immediate actions:**\n- Deploy real-time AI-assisted communication analysis tools to flag suspicious social engineering indicators during live calls and chats.\n- Establish and enforce a strict callback verification protocol for any request involving sensitive data, credential resets, or financial transactions.\n\n**Long-term improvements:**\n- Redesign security awareness training to include simulated vishing and deepfake scenarios with measurable competency outcomes.\n- Implement a formal identity verification framework (e.g., out-of-band confirmation) for all privileged access requests initiated via phone or messaging.\n- Develop and regularly test an incident response playbook specifically for social engineering attack scenarios.\n\n**Detection measures:**\n- Monitor and log all help desk and privileged-access-related communications for anomalous request patterns.\n- Establish behavioral analytics baselines to detect unusual account activity that may follow a successful social engineering attempt.",[12,13,14,15,16,17,18,19,20,21],"CIS Control 14: Security Awareness and Skills Training","CIS Control 6: Access Control Management","NIST SP 800-50: Building an Information Technology Security Awareness and Training Program","NIST SP 800-61: Computer Security Incident Handling Guide","NIST AC-2: Account Management","NIST IA-3: Device Identification and Authentication","NIST IR-6: Incident Reporting","GDPR Article 32: Security of Processing","ITIL Service Desk Security Verification Practices","MITRE ATT&CK T1566: Phishing \u002F T1598: Vishing",{},"published","2026-10-06T10:21:05.51227+00:00","2026-10-06T10:21:05.41+00:00",{"id":7,"url":27,"slug":28,"title":29},"https:\u002F\u002Fwww.securityweek.com\u002Fsocial-engineering-detection-moves-into-the-live-conversation\u002F","social-engineering-detection-moves-into-the-live-conversation-1fd609","Social Engineering Detection Moves Into the Live Conversation",[31,37],{"id":32,"name":33,"slug":34,"description":35,"color":36},"182e11d5-57c4-444e-8ec8-4682ad60261b","Incident Response","incident-response","Slow detection, poor containment, missing playbooks","#14b8a6",{"id":38,"name":39,"slug":40,"description":41,"color":42},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",[],[45,49,53],{"slug":46,"name":47,"problem":48},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":50,"name":51,"problem":52},"deception","Deception and honeypots","An attacker who gets in quietly can explore the network for weeks before any alarm goes off.",{"slug":54,"name":55,"problem":56},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them."]