Hacking the Human Firewall:
Insights from Social Engineering Corporations

Despite significant investments in cutting-edge security technologies, the human element remains the weakest link in cybersecurity. Attackers continuously exploit human behavior to bypass even the most advanced technical defenses. This presentation will provide experiences of hands-on real-world social engineering campaigns, mirroring the tactics used by sophisticated threat actors.

• OSINT - Determining Targets and Entry Points
• NIST Phish Scale - Evaluating the Content of a Phishing Email
• Email Phishing - How Attackers Get SPAM Into the Corporate Inbox
• Phone Social Engineering - Experiences in Impersonation and Taking Over Accounts
• Physical Security - Outcomes from Just Hanging Around the Office

Ahmed Shah

Security Analyst, Malleum

Ahmed Shah is a security analyst at Malleum Information Security in Ottawa, Canada. He is experienced at performing cloud security assessments, leading red team engagements, vulnerability assessments, and penetration tests for private sector clients and government agencies.