Social engineering is the manipulation of people into revealing confidential information, granting access or taking harmful actions, by exploiting trust, fear, urgency or helpfulness rather than technical vulnerabilities. It remains highly relevant because human habits change far more slowly than technology, and it was the most frequent initial access vector in the incident response cases analysed by Unit 42.
