There Is No Patch For Stupidity.

When An Attacker Fails With One Person, They Often Go To Another Person. The Key Is To Report The Attack To Other Departments. Workers Should Know To Act Like They Are Going Along With What The Hacker Wants And Take Copious Notes So The Company Will Know What The Hacker Is Trying To Find.

We Have Problems With Our Physical Security, Operational Security Through To Management.

Garbage Can Provide Important Details For Hackers: Names, Telephone Numbers, A Company's Internal Jargon.

It’s Actually A Smarter Crime Because Imagine If You Rob A Bank, Or You’re Dealing Drugs. If You Get Caught You’re Going To Spend A Lot Of Time In Custody. But With Hacking, It’s Much Easier To Commit The Crime And The Risk Of Punishment Is Slim To None.

I Can Go Into Linkedin And Search For Network Engineers And Come Up With A List Of Great Spear-phishing Targets Because They Usually Have Administrator Rights Over The Network. Then I Go Onto Twitter Or Facebook And Trick Them Into Doing Something, And I Have Privileged Access.