Social engineering and human defences

Framed on the host, a reed warbler inspecting and tipping a mismatched cuckoo egg out of the nest, it captures both the deception and the learned detection

Social engineering succeeds not because people are careless but because the techniques are designed to exploit the conditions under which people operate: time pressure, authority cues, familiarity with certain visual patterns, trust in infrastructure they cannot inspect. Defending against it requires understanding how those conditions work, not just drilling recognition of last year’s examples.

The foundations apply directly to social engineering defence: why so many security awareness programmes produce the wrong kind of learning, what a programme built on current attacker techniques looks like in practice, and how the change arc runs through the transition from compliance-theatre simulation to continuous, systems-level testing.

Applying the foundations to social engineering defence:

Last updated: 8 July 2026