In the age of tech companies consistently doing shitty things, this is genuinely cool and a smart solution to stopping Scammers with RCS (meaning it's encrypted and private too)!

Now we’re talking 🎉

WHOA Google let me know they saw my tweet last year & built a tool to defend against the exact call spoofing + AI voice clone attack! As of *today*, fake call detection on Android alerts when someone is impersonating your contact. Thread and demo below:

I used deepfakes & injection attacks to hack an identity verification tool used for remote workforce, helpdesk, & onboarding…until they updated the tool to catch me. Thank you @incode.bsky.social for having me hack you 110+ times to find the latest vulns and fix them🤖🤘 Full vid: youtu.be/pAegYkwWIgE

"If there's one thing I could tell people to do, it would be to use a password manager. Do not reuse old passwords." @racheltobac.bsky.social, on how to protect yourselves from hacks

Whoa, Instructure (who owns Canvas) says they came to an agreement with the cyber criminals (typically this means a ransom was paid) in exchange for the stolen data being deleted instead of leaked and criminals ceasing all extortion requests from customers. Huge development.

Canvas is hacked and stressing out 230+ million students, teachers and staff during finals. What does this mean and how do we stay safe? What are the next steps for the 8,800 affected schools during finals. Answered below in my video:

My dad told me if I'm the smartest person in a room, then I'm in the wrong room. For the @rapid7.com Global #Cybersecurity Summit I'll be in the right room as I'll be joined by @rajsamani.bsky.social @racheltobac.bsky.social & @grahamcluley.com for the Keynote Panel. Join us rapid7.brighttalk.com

Have you received a party invite that turned out to be fake (a scam!) in the last 6 months?! I just broke down how this scam works for the @nytimes.com, dive into the 2 distinct paths this scam follows, how to catch it, and how to reduce its impact if you do click: www.nytimes.com/2026/04/23/s...

Want my thoughts on Anthropic's Mythos risk vs hype, how I use AI to bypass identity verification systems now, & more? Tune in for my Rapid7's 2026 Global Cybersecurity Summit keynote panel 5/12 with Graham Cluley, Raj Samani, Brian Honan! Join me here: rapid7.brighttalk.com

I'm speaking at Rapid7's 2026 Global Cybersecurity Summit, May 12-13. Come hear me chat about how modern attacks actually start, and the reality of running a SOC in 2026 - alongside @racheltobac.bsky.social, @rajsamani.bsky.social, and @brianhonan.bsky.social rapid7.brighttalk.com?utm_source=r...

Going to this UN thing in Vienna with my team and the only name I recognize on the program is @RachelTobac (which is a good sign! So much to learn about scams!)

This is still a good reminder from @racheltobac.bsky.social

I watch my company’s security awareness training just because the speaker is @racheltobac.bsky.social

Signal will never message you like this. If you get a message like this, SOMEONE IS TRYING TO HACK YOUR SIGNAL. DO NOT GIVE THEM THAT CODE.

WARNING, fellow journalists: As @nicoschmidt.io explains, attackers are trying to hijack reporters' Signal accounts by tricking people into handing over their 2FA codes. www.linkedin.com/posts/nicosc...

If you’re an activist, journalist, exec, or have a high threat model for any other reason, I do recommend using all tools to protect against spyware including Apple’s lockdown mode and WhatsApp’s new Strict Account Settings. Thanks WhatsApp for the partnership to get the word out to folks.

The repairable, customizable, build-it-yourself, physical webcam & mic kill switch, Linux compatible, port swappable @frame.work laptop has hit the SocialProof office 🤖🤘

Great work from @racheltobac.bsky.social, with @cnn.com: How the latest deepfake scam can cheat companies out of millions. Good one to share with your company, and with friends & loved ones. edition.cnn.com/2025/10/07/b... cc @craignewmark.bsky.social @pausetake9.bsky.social @gate15.bsky.social

An totally entertaining, and informative interview with @racheltobac.bsky.social and Scammer Payback about hacking and handling your online privacy in the new epoch of AI. youtu.be/xEdZwLRJttQ?...

Episode 22: Social Engineering, Gas Mark 4, and AGAs with Rachel Tobac! @tib3rius.bsky.social & @swiftsecur.bsky.social are joined by @racheltobac.bsky.social to talk social engineering war stories...and more! Links below!

“The consumer’s son has been interacting with an AI chatbot called ChatGPT, which is advising him not to take his prescribed medication and telling him that his parents are dangerous,” reads the FTC’s summary of one of the calls.

Hey @racheltobac.bsky.social you're probably going to need to hire a lot more people for all the new clients you're about to get.

*My Latest CNN Zoom Call Deepfake Demo* An eng org sent $25M to scammers who deepfaked the CFO in a live video call. Are your colleagues, fam & friends ready to catch this AI attack? I demo'd a live Zoom deepfake to CNN's Clare Duffy to help you spot the signs: edition.cnn.com/2025/10/07/b...

Two of our tech reporters tested out Sora, a smartphone app made by OpenAI that lets people create videos entirely from A.I. “It is, in effect, a social network in disguise; a clone of TikTok down to its user interface, algorithmic video suggestions and ability to follow and interact with friends.”

"It makes it really easy to create a believable deepfake in a way that we haven’t quite seen yet." -- @racheltobac.bsky.social, CEO of SocialProof Security, a cybersecurity start-up in San Francisco

@racheltobac.bsky.social new threat model for businesses? 😬😵‍💫

This should be mandatory watch by everybody who has a phone and or email. @racheltobac.bsky.social shows how vulnerable we all are to getting hacked through social engineering and with gAI tools it's only gotten easier.

I only watched this today, but I enjoyed it immensely. So many security lessons in a very entertaining package. 😊

🪞Does ChatGPT think you're perfect? You're not alone. 🎧 On this week's episode of The AmberMac Show podcast, @racheltobac.bsky.social and I chat about the sycophantic nature of this popular tool. Listen to the full episode here: bio.site/ambermac

💻 When I need to learn more about AI safety & security, I ask @racheltobac.bsky.social. You may have seen her on 60 Minutes. I met Rachel when I interviewed former FBI Director James Comey at an event (we all had dinner the eve before, that's a whole other story!). www.youtube.com/watch?v=cule...

🥺 Are chatbots dangerous for our kids? 🎙️ We are dedicating this week's new episode of The AmberMac Show podcast, out today, to this topic 👇 bio.site/ambermac @racheltobac.bsky.social on some of these risks @jeffmacarthur.bsky.social on the dangers of chatbots becoming a "mentor" in the home

Great interview with @racheltobac.bsky.social shining a light in a lot of important topics, like what are likely attack vectors, impact of #AI on #security, #ethics, affecting social interactions and #privacy . "Be politely paranoid." 👏 www.youtube.com/watch?v=xEdZ...

If you want to learn more on how easy these things are these days especially given AI tooling, I recommend following @racheltobac.bsky.social and her fabulous work on social engineering. Learned a bunch from her and her demonstrations. Latest video I loved: youtu.be/xEdZwLRJttQ

This was a VERY eye opening and informative interview that is worth watching!

Definitely worth a look. Scary world we live in at the moment 😱 When do people wake up - What can we do 🤔?

*New live hack demo - stealing security question answers w/ AI voice clones* At @defcon.bsky.social I went on ScammerPayback podcast and hacked the host by calling his friends & stealing answers to his bank's password reset questions using a voice clone w/in 10 secs. www.youtube.com/watch?v=xEdZ...

Live from New York it’s hackers at Nasdaq! Great to go live with @davegerryjr.bsky.social @bugcrowd.com in Times Square today to talk ethical hacking, security and AI!

Today at #GRCConf I show up to tech check for my keynote at 7 am and Jackie Burns (the longest running Elphaba from Wicked) is there and that’s the moment I realized the opener before my keynote was Elphaba singing Defying Gravity. I’ll never be the same lol

Join me and 1Kosmos on 8/20 for a live hacking demo and fireside chat! I'll show how I use AI to bypass traditional defenses in Hiring, Support, Service Desk & more. You’ll see attacks used in the wild & actionable steps to catch them! Register to join: us02web.zoom.us/webinar/regi...

Thank you for meeting up @racheltobac.bsky.social Really appreciate it! #defcon33

Hanging in the backrooms @defcon.bsky.social with the indomitable @racheltobac.bsky.social @evantobac.bsky.social

omg ran into the amazing @racheltobac.bsky.social !!!!!! 🤩⭐️

See lots of scam messages via text & apps lately? You’re not alone! Scammers are using people's economic anxiety to trick with lures that are too good or too dire to be true! They're also using AI to create attacks. Here are the latest messaging scams + how to catch them. youtube.com/shorts/K8x86...

I’ll be on NBC News Now soon talking thru the Tea App hack and how to protect yourself during a data breach sometime between 7-8 pm ET tonight (probably 7:30 pm ET) if you want to watch 🤖🤘 nbcnews.com/watch or www.youtube.com/watch?v=3o_t...

It doesn't matter whether this app was a honeypot or just vibe coded by a bunch of assholes with no security awareness, the impact is exactly the same

2nd Tea App breach?! 1 million messages w/ sensitive cheating stories, details of ending pregnancies, contact details, real names — it could not be more serious. Here are actions to protect yourself. I’ll be on NBC News Now at 7 pm ET tomorrow discussing this. www.linkedin.com/posts/rachel...

Time to find the right journalist(s) for live hacking demo video pieces. If you're coming to DEF CON and want a scoop, lmk: 1. How AI voice clones are currently being used to target Execs and their orgs in the wild for wire transfer fraud, passwords, and document stealing & how to stop it

@racheltobac.bsky.social arstechnica.com/security/202...