@نيـووفِِ: #مجرد________ذووووووق🎶🎵💞 #مجرد_ذووقツ🖤🎼 #مجرد_ذووقツ #ذوقي_للناس_الرايقه #fyp

احـاسـيـس دوسـري ♪ .
احـاسـيـس دوسـري ♪ .
Open In TikTok:
Region: SA
Monday 29 June 2026 22:47:18 GMT
33198
1482
3
278

Music

Download

Comments

c__nw17
Nn🎬 :
اشكرك على مقاطعك 🫵🏻👑
2026-06-30 05:36:27
0
null3244
راعي سلطان الشعل 🐪🔥 :
🔥🔥
2026-06-30 06:51:05
1
To see more videos from user @نيـووفِِ, please go to the Tikwm homepage.

Other Videos

“The weakest link in your security stack isn’t a port, it’s a person: meet the Human OS — and yes, it’s hackable.” We spend billions hardening networks, patching servers, and tuning firewalls — and then hand an attacker the keys by exploiting how people think, feel, and behave. Human-centered attacks aren’t a fringe concern anymore; they’re the dominant vector. As security pros, we must stop treating humans as the problem and start treating them as the platform to defend. What “Hacking the Human OS” means * The Human OS = cognitive biases, social norms, emotional triggers, workplace habits, and incentive structures that determine how people make security decisions. * Attackers exploit predictable mental shortcuts (authority bias, urgency, reciprocity), modern tools (deepfakes, business-email compromise), and operational gaps (poor onboarding, unclear reporting) to breach organizations without touching a network cable. Common ways the Human OS is hacked * Phishing & Business Email Compromise (BEC): well-crafted messages that mimic executives, vendors, or HR to trick people into transferring funds, revealing credentials, or installing malware. * Pretexting & Vishing: attackers build believable stories or call pretending to be IT/support to extract secrets. * Social media reconnaissance: building dossiers from public posts to craft highly believable scams. * Incentive manipulation: exploiting reward systems, deadlines, or fear of missing out to force risky behavior. * Tech-enabled deception: deepfakes, synthetic voice, and spoofed domains amplify trust-based attacks. * Insider threat via burnout or bribery: when human constraints (stress, lack of oversight) align with attacker opportunity. Real impact (why leadership should care) * A single compromised user can bypass multi-layered investments in tech controls. * Human-targeted breaches cause rapid lateral movement, data exfiltration, costly recovery, brand damage, and regulatory exposure. * Security maturity is now measured as much by human resilience as by patch cadence. Practical — not theoretical — mitigations 1. Treat people like systems: map human workflows, decision points, and friction where errors are likely. 2. Replace “awareness” with measurable behavior change: run frequent, realistic simulated phishing and track click-to-report metrics (not just completion rates). 3. Design for friction: put safe defaults and micro-delays on high-risk actions (e.g., approvals for wire transfers, mandatory peer verification). 4. Strengthen identity & authentication: MFA, adaptive authentication, and passwordless where possible. 5. Create a reporting culture: low-friction, no-blame reporting channels + fast feedback loops to reward good security behavior. 6. Use technical complements: email authentication (SPF, DKIM, DMARC), secure email gateways with AI-based anomaly detection, and endpoint EDR tuned for social-engineering indicators. 7. Operationalize threat intel: translate observed social campaigns into targeted defender playbooks and internal alerts. 8. Leadership & HR partnership: secure onboarding/offboarding, role-based training, and workload checks to reduce burnout-induced mistakes. The human firewall is not mythical — it’s built Security tech will continue to evolve, but attackers will keep targeting what’s predictable: human behavior. The organizations that succeed will do three things consistently: measure human risk like any other KPI, design systems to reduce error, and reward the right behavior. If you lead security, product, or people operations: what one workflow in your org would be most vulnerable to a convincing pretext? Drop it in the comments — I’ll share a short checklist to harden that exact workflow. #Cybersecurity #HumanRisk #SocialEngineering #Infosec
“The weakest link in your security stack isn’t a port, it’s a person: meet the Human OS — and yes, it’s hackable.” We spend billions hardening networks, patching servers, and tuning firewalls — and then hand an attacker the keys by exploiting how people think, feel, and behave. Human-centered attacks aren’t a fringe concern anymore; they’re the dominant vector. As security pros, we must stop treating humans as the problem and start treating them as the platform to defend. What “Hacking the Human OS” means * The Human OS = cognitive biases, social norms, emotional triggers, workplace habits, and incentive structures that determine how people make security decisions. * Attackers exploit predictable mental shortcuts (authority bias, urgency, reciprocity), modern tools (deepfakes, business-email compromise), and operational gaps (poor onboarding, unclear reporting) to breach organizations without touching a network cable. Common ways the Human OS is hacked * Phishing & Business Email Compromise (BEC): well-crafted messages that mimic executives, vendors, or HR to trick people into transferring funds, revealing credentials, or installing malware. * Pretexting & Vishing: attackers build believable stories or call pretending to be IT/support to extract secrets. * Social media reconnaissance: building dossiers from public posts to craft highly believable scams. * Incentive manipulation: exploiting reward systems, deadlines, or fear of missing out to force risky behavior. * Tech-enabled deception: deepfakes, synthetic voice, and spoofed domains amplify trust-based attacks. * Insider threat via burnout or bribery: when human constraints (stress, lack of oversight) align with attacker opportunity. Real impact (why leadership should care) * A single compromised user can bypass multi-layered investments in tech controls. * Human-targeted breaches cause rapid lateral movement, data exfiltration, costly recovery, brand damage, and regulatory exposure. * Security maturity is now measured as much by human resilience as by patch cadence. Practical — not theoretical — mitigations 1. Treat people like systems: map human workflows, decision points, and friction where errors are likely. 2. Replace “awareness” with measurable behavior change: run frequent, realistic simulated phishing and track click-to-report metrics (not just completion rates). 3. Design for friction: put safe defaults and micro-delays on high-risk actions (e.g., approvals for wire transfers, mandatory peer verification). 4. Strengthen identity & authentication: MFA, adaptive authentication, and passwordless where possible. 5. Create a reporting culture: low-friction, no-blame reporting channels + fast feedback loops to reward good security behavior. 6. Use technical complements: email authentication (SPF, DKIM, DMARC), secure email gateways with AI-based anomaly detection, and endpoint EDR tuned for social-engineering indicators. 7. Operationalize threat intel: translate observed social campaigns into targeted defender playbooks and internal alerts. 8. Leadership & HR partnership: secure onboarding/offboarding, role-based training, and workload checks to reduce burnout-induced mistakes. The human firewall is not mythical — it’s built Security tech will continue to evolve, but attackers will keep targeting what’s predictable: human behavior. The organizations that succeed will do three things consistently: measure human risk like any other KPI, design systems to reduce error, and reward the right behavior. If you lead security, product, or people operations: what one workflow in your org would be most vulnerable to a convincing pretext? Drop it in the comments — I’ll share a short checklist to harden that exact workflow. #Cybersecurity #HumanRisk #SocialEngineering #Infosec

About