Cybersecurity Training Takeaways: Social Media and Social Engineering

security privacy phishing social engineering

Quick notes from a recent cybersecurity training session, focused on social media and social engineering.

• Treat social media as high-risk: Anything you post (even "private") can be found and used for targeted attacks.
• Verify before you trust: Fake profiles and AI deepfakes are easy to make. Confirm people and sources through other trusted channels before engaging.
• Social engineering isn't just email: Attackers use social media, phone calls, and in-person contact to manipulate you into sharing access or information.
• Never post sensitive information: Don't share work secrets, personal details, or "fun" survey answers (first pet, first car, hometown) that expose you or your network.
• Spot disinformation: Intentionally false content spreads fast. Verify sources before believing or sharing.