This talk was recorded at NDC London in London, England. #ndclondon  #ndcconferences #developer #softwaredeveloper    

Attend the next NDC conference near you: 
https://ndcconferences.com
https://ndclondon.com/

Subscribe to our YouTube channel and learn every day:   
/       @NDC 

Follow our Social Media!

https://www.facebook.com/ndcconferences
https://twitter.com/NDC_Conferences
https://www.instagram.com/ndc_conferences/

#security #softskills 

We put so much effort into securing our systems. We enforce multi-factor authentication. We deploy WAFs. We mandate software updates. We constantly scan our code. We encrypt our communication and sensitive data. Researchers ensure that ciphers remain strong. Yet, we’re still getting hit. Facebook lost $99 million, Ubiquiti $39.1 million, Google $23 million, Toyota $37 million, the Government of Puerto Rico $2.6 million, and Belgian Bank Crelan $75.8 million.

What is the common denominator in all these attacks? Social engineering. It is one of the most subtle yet potent set of techniques, often used by individuals or groups to exploit human weaknesses and gain access to systems and sensitive data. No organization or group is immune to this form of attack.

Working in an IT company places us in the crossfire. On one hand, we have access to not only business data but also information that could be exploited to attack our organization. On the other hand, IT professionals themselves are well-positioned, making themselves potential targets of attacks.

While it’s almost impossible to be fully protected against social engineering, it is vital to understand the possible vectors of attack. Various methods and psychological tricks can be used to compromise our security or that of our organization.

So, let’s buckle up and take a small step toward becoming more secure.

NDC Conferences

A conference talk from NDC London 2026 covering social engineering attacks targeting humans rather than technical systems. The speaker, a software test automation engineer, walks through real-world incidents (npm supply chain attack, Twitter hack, corporate payroll fraud), attack techniques including phishing, spear phishing, vishing, pretexting, elicitation, and QR code exploits, and psychological weaknesses attackers exploit such as authority bias, urgency, and curiosity. Practical defense strategies are outlined: building awareness, risk assessment and emergency planning, security hygiene (MFA, passkeys, password managers, software updates), minimizing online footprint via OSINT self-research, and reporting suspicious activity.

Social Engineering: Hacking Humans - Pawel Sucholbiak - NDC London 2026