I watch my company’s security awareness training just because the speaker is @racheltobac.bsky.social

Signal will never message you like this. If you get a message like this, SOMEONE IS TRYING TO HACK YOUR SIGNAL. DO NOT GIVE THEM THAT CODE.

WARNING, fellow journalists: As @nicoschmidt.io explains, attackers are trying to hijack reporters' Signal accounts by tricking people into handing over their 2FA codes. www.linkedin.com/posts/nicosc...

If you’re an activist, journalist, exec, or have a high threat model for any other reason, I do recommend using all tools to protect against spyware including Apple’s lockdown mode and WhatsApp’s new Strict Account Settings. Thanks WhatsApp for the partnership to get the word out to folks.

The repairable, customizable, build-it-yourself, physical webcam & mic kill switch, Linux compatible, port swappable @frame.work laptop has hit the SocialProof office 🤖🤘

Great work from @racheltobac.bsky.social, with @cnn.com: How the latest deepfake scam can cheat companies out of millions. Good one to share with your company, and with friends & loved ones. edition.cnn.com/2025/10/07/b... cc @craignewmark.bsky.social @pausetake9.bsky.social @gate15.bsky.social

An totally entertaining, and informative interview with @racheltobac.bsky.social and Scammer Payback about hacking and handling your online privacy in the new epoch of AI. youtu.be/xEdZwLRJttQ?...

Episode 22: Social Engineering, Gas Mark 4, and AGAs with Rachel Tobac! @tib3rius.bsky.social & @swiftsecur.bsky.social are joined by @racheltobac.bsky.social to talk social engineering war stories...and more! Links below!

“The consumer’s son has been interacting with an AI chatbot called ChatGPT, which is advising him not to take his prescribed medication and telling him that his parents are dangerous,” reads the FTC’s summary of one of the calls.

Hey @racheltobac.bsky.social you're probably going to need to hire a lot more people for all the new clients you're about to get.

*My Latest CNN Zoom Call Deepfake Demo* An eng org sent $25M to scammers who deepfaked the CFO in a live video call. Are your colleagues, fam & friends ready to catch this AI attack? I demo'd a live Zoom deepfake to CNN's Clare Duffy to help you spot the signs: edition.cnn.com/2025/10/07/b...

Two of our tech reporters tested out Sora, a smartphone app made by OpenAI that lets people create videos entirely from A.I. “It is, in effect, a social network in disguise; a clone of TikTok down to its user interface, algorithmic video suggestions and ability to follow and interact with friends.”

"It makes it really easy to create a believable deepfake in a way that we haven’t quite seen yet." -- @racheltobac.bsky.social, CEO of SocialProof Security, a cybersecurity start-up in San Francisco

@racheltobac.bsky.social new threat model for businesses? 😬😵‍💫

This should be mandatory watch by everybody who has a phone and or email. @racheltobac.bsky.social shows how vulnerable we all are to getting hacked through social engineering and with gAI tools it's only gotten easier.

I only watched this today, but I enjoyed it immensely. So many security lessons in a very entertaining package. 😊

🪞Does ChatGPT think you're perfect? You're not alone. 🎧 On this week's episode of The AmberMac Show podcast, @racheltobac.bsky.social and I chat about the sycophantic nature of this popular tool. Listen to the full episode here: bio.site/ambermac

💻 When I need to learn more about AI safety & security, I ask @racheltobac.bsky.social. You may have seen her on 60 Minutes. I met Rachel when I interviewed former FBI Director James Comey at an event (we all had dinner the eve before, that's a whole other story!). www.youtube.com/watch?v=cule...

🥺 Are chatbots dangerous for our kids? 🎙️ We are dedicating this week's new episode of The AmberMac Show podcast, out today, to this topic 👇 bio.site/ambermac @racheltobac.bsky.social on some of these risks @jeffmacarthur.bsky.social on the dangers of chatbots becoming a "mentor" in the home

Great interview with @racheltobac.bsky.social shining a light in a lot of important topics, like what are likely attack vectors, impact of #AI on #security, #ethics, affecting social interactions and #privacy . "Be politely paranoid." 👏 www.youtube.com/watch?v=xEdZ...

If you want to learn more on how easy these things are these days especially given AI tooling, I recommend following @racheltobac.bsky.social and her fabulous work on social engineering. Learned a bunch from her and her demonstrations. Latest video I loved: youtu.be/xEdZwLRJttQ

This was a VERY eye opening and informative interview that is worth watching!

Definitely worth a look. Scary world we live in at the moment 😱 When do people wake up - What can we do 🤔?

*New live hack demo - stealing security question answers w/ AI voice clones* At @defcon.bsky.social I went on ScammerPayback podcast and hacked the host by calling his friends & stealing answers to his bank's password reset questions using a voice clone w/in 10 secs. www.youtube.com/watch?v=xEdZ...

Live from New York it’s hackers at Nasdaq! Great to go live with @davegerryjr.bsky.social @bugcrowd.com in Times Square today to talk ethical hacking, security and AI!

Today at #GRCConf I show up to tech check for my keynote at 7 am and Jackie Burns (the longest running Elphaba from Wicked) is there and that’s the moment I realized the opener before my keynote was Elphaba singing Defying Gravity. I’ll never be the same lol

Join me and 1Kosmos on 8/20 for a live hacking demo and fireside chat! I'll show how I use AI to bypass traditional defenses in Hiring, Support, Service Desk & more. You’ll see attacks used in the wild & actionable steps to catch them! Register to join: us02web.zoom.us/webinar/regi...

Thank you for meeting up @racheltobac.bsky.social Really appreciate it! #defcon33

Hanging in the backrooms @defcon.bsky.social with the indomitable @racheltobac.bsky.social @evantobac.bsky.social

omg ran into the amazing @racheltobac.bsky.social !!!!!! 🤩⭐️

See lots of scam messages via text & apps lately? You’re not alone! Scammers are using people's economic anxiety to trick with lures that are too good or too dire to be true! They're also using AI to create attacks. Here are the latest messaging scams + how to catch them. youtube.com/shorts/K8x86...

I’ll be on NBC News Now soon talking thru the Tea App hack and how to protect yourself during a data breach sometime between 7-8 pm ET tonight (probably 7:30 pm ET) if you want to watch 🤖🤘 nbcnews.com/watch or www.youtube.com/watch?v=3o_t...

It doesn't matter whether this app was a honeypot or just vibe coded by a bunch of assholes with no security awareness, the impact is exactly the same

2nd Tea App breach?! 1 million messages w/ sensitive cheating stories, details of ending pregnancies, contact details, real names — it could not be more serious. Here are actions to protect yourself. I’ll be on NBC News Now at 7 pm ET tomorrow discussing this. www.linkedin.com/posts/rachel...

Time to find the right journalist(s) for live hacking demo video pieces. If you're coming to DEF CON and want a scoop, lmk: 1. How AI voice clones are currently being used to target Execs and their orgs in the wild for wire transfer fraud, passwords, and document stealing & how to stop it

@racheltobac.bsky.social arstechnica.com/security/202...

took this into work today and showed folk there... I think we might see some change ... thank you for doing this

AI voice clones have hit the White House AGAIN, now impersonating the Secretary of State to other Gov officials to try to steal secrets/access. Here is a video of me live demoing how quick (2 min) and easy it is to clone a voice to hack and how to catch AI voice clone attacks in action!

This. I know people who are naturally graceful and kind at cons like Wendy Nather or my lovely spouse @deviantollam.bsky.social or @racheltobac.bsky.social or so many other icons I look up to. But as an introvert it is *hard* to have that energy. It’s physically draining, though very meaningful.

It's fun to learn from smart people. @racheltobac.bsky.social is smart people. Check out: Hacker Conversations: Rachel Tobac and the Art of Social Engineering. www.securityweek.com/hacker-conve... cc @gate15.bsky.social #cybersecurity

I got my start hacking in the booth at @defcon.bsky.social. It changed my life. Now I'm a *Judge* for the NEW Social Engineering Community Village AI-powered hacking competition where teams use AI agents for live phone call attacks on DEF CON Sat! Apply to compete: www.se.community/battle-of-th...

Il y a quelques années, @racheltobac.bsky.social avait adapté ce magnifique shanty 😀 www.youtube.com/watch?v=Ft5b...

Another stellar Wednesday Offensive! Thank you @racheltobac.bsky.social for an engaging conversation and real time examples of the power of Deepfakes! Next week we have Kevin Ripa discussing "When forensics gets it wrong" #hacking #infosec #cybersecurity

It's time to reorient ourselves with the Disgruntled Former Teammate & Insider Threat Prevention Handbook. insights.sei.cmu.edu/library/the-...

Voice clones are easy. Be suspicious even if a call appears to be from someone you know. Also…Don’t set up voice authentication for banking.

Someone AI voice cloned the White House chief of staff & asked for: list of individuals the President should pardon, cash transfer, questions about President. If your team doesn’t know how to verify identity to avoid getting tricked by voice clones, now is the time to prep them.

If your organization provides automated phishing testing (without requiring the team to buy more than that in a bundle), please reach out to me!

We desperately needed these new rules (which the Consumer Financial Protection Bureau *just canceled*) to limit data brokers ability to sell our personal sensitive data. I want my job as an ethical hacker to be *much harder*, this sadly makes it easier. www.wired.com/story/cfpb-q...

We desperately needed these new rules (which the Consumer Financial Protection Bureau *just canceled*) to limit data brokers ability to sell our personal sensitive data. I want my job as an ethical hacker to be *much harder*, this sadly makes it easier. www.wired.com/story/cfpb-q...