Generative AI has made voice cloning accessible, allowing threat actors to replicate an executive's or colleague's voice using only short audio samples. This episode explores the surge in voice phishing (vishing) attacks targeting corporate finance, HR, and helpdesks to authorize urgent wire transfers or credential reset. Listeners will learn how to identify synthetic audio artifacts and establish a healthy skepticism when receiving unexpected, high-stakes phone calls.
 
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

Serving as the strategic bridge between Week 1 and Week 2, this episode examines how threat actors transition from text-based phishing to AI-synthesized audio and video deception. The hosts explore how adversaries combine stolen browser data with voice cloning tools to execute sophisticated "callback phishing" and vishing attacks targeting helpdesks and finance teams. Listeners gain a preview of Week 2's deepfake threats alongside practical out-of-band verification scripts to ensure "just calling back" is done securely.
 
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

As Week 1 of October Awareness Month concludes, this episode synthesizes the text-based social engineering tactics covered so far into an interactive scenario-based review. The hosts evaluate real-world 2026 phishing lures—from LLM-crafted email lures to infostealer attachments—and break down how organizations track reporting velocity rather than mere click-through rates. Listeners learn how to benchmark their security reflexes and prepare their defenses as social engineering pivots toward non-text channels.
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

Modern cybersecurity success is no longer measured by low click rates on fake tests, but by reporting velocity—how fast employees flag real threats[ This episode demonstrates how clicking the "Report Phishing" button feeds real-time threat telemetry directly into automated Security Operations Center (SOC) workflows. The hosts explain how a single employee's rapid report can automatically quarantine a malicious campaign across the entire enterprise.
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

As 80% of workers adopt generative AI tools for daily tasks, attackers have developed "prompt injection" techniques to weaponize workplace AI assistants. By hiding malicious commands inside web pages or document attachments, adversaries can trick AI assistants into exfiltrating corporate data or executing backdoors. This episode breaks down the "Check Before You Paste" rule and offers clear guardrails for using AI tools safely.
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

Adversaries routinely bypass traditional email gateways by launching multi-channel social engineering campaigns across internal collaboration tools like Microsoft Teams, Slack, and SMS. By exploiting implicit workplace trust, attackers drop malicious files or urgent link requests into team channels where employees least expect them. This episode highlights how to extend critical evaluation habits across every communication channel you use at work.
 
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

With infostealers like Vidar and StealC infecting over 11 million machines and harvesting 3.3 billion credentials in 2025, threat actors have moved beyond simple password cracking. This episode explains how malware delivered via "ClickFix" social engineering prompts steals session cookies and OAuth tokens directly from browsers. Listeners will learn why cookie hygiene and endpoint isolation are critical to preventing attackers from simply "logging in" as valid users.
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth

As Large Language Models (LLMs) eliminate traditional "tells" like bad grammar and awkward formatting, AI-crafted social engineering has transformed phishing into a high-velocity, automated attack pipeline This episode explores how adversaries deploy generative AI to craft hyper-personalized lures across email, Teams, and Slack in minutes while delivering infostealers that harvest corporate credentials. Aligning with the National Cybersecurity Alliance’s "Don't Make It Easy for Them!" campaign, the hosts break down practical daily habits and demonstrate how rapid threat reporting converts employee vigilance into real-time telemetry for the SOC.
🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31Enter free: https://cyberaware.winBonus entries (+25 for your first submission): https://cyberaware.win/communityGrand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights20% off across CISO Marketplace with code CYBERAWARE26No purchase necessary. Rules: https://cyberaware.win/rulesFull October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/#CyberAwareWin #CybersecurityAwarenessMonth