OSINT (open-source intelligence) is information collected from publicly available sources, used by attackers to prepare targeted social engineering and by defenders to assess exposure. Attackers combine Handelsregister entries, Xing profiles and company news to craft spear phishing, and defenders use the same data to run simulations that mirror real reconnaissance.
