04Threats

The human layer of every breach

Behind almost every breach report that says 'sophisticated attack' is a simple story: someone did something sensible in a situation an attacker had carefully designed.

Jul 20264 min read

01Reasonable choices, manipulated context

An accountant pays an urgent invoice because the CFO 'asked'. A developer runs a script because a 'recruiter' sent a coding test. An IT admin resets a password because the caller knew the employee ID.

None of these people were careless. The context was engineered so the wrong action felt like the right one. Blaming individuals misses the point — the context is the vulnerability.

02Designing for humans

If a process collapses when one person is deceived, the process is the problem. Verification steps, payment callbacks, and out-of-band approvals turn one manipulated moment into a caught attempt.

Then train the human layer with the respect it deserves: realistic simulations, no shame for reporting, and fast feedback. People who are afraid to report are people attackers can reuse.

All publications Next publicationThinking like an adversary without becoming one