We are so excited for the new Music and Spoken Hacking Demo security awareness Training Videos we just released! Thank you to the orgs who already signed up, if you prefer to watch a demo without need for a phone call, here’s the form for that! forms.gle/S8QabwwcaYKUySnd7

WHOA @Google let me know they saw my tweet below last year & built a tool to defend against this exact call spoofing AI voice clone attack! As of today, fake call detection on Android alerts when someone is impersonating your contact. Demo & thread of how it catches attackers:

👀 We asked @socialproofsec to hack us 110 times. Independent pentest across 13 attack types: deepfakes, injection attacks, AI-generated docs, emulators, replay attacks. Zero mobile bypasses. Full report ↓ incode.com/pentest-socialpro…

One of the coolest parts of my job, getting to hack for good. Test every attack method used in the wild, assume there will be some vulns, and fix them quick. Get our full Pentest Report from @IncodeIdentity and see what they can do at: incode.com/pentest-socialpro…

Tested mobile & browser: hard/software vid injection, deepfakes, replays, emulators, rooted devices, manipulated ids. Mobile held up every time. Web flows were the 1 way in. When we got in w/ web hard/software vid injection, we gave those vulns to Incode & they fixed them quick.

I used deepfakes & injection attacks to hack an identity verification tool used for remote workforce, helpdesk, & onboarding…until they updated the tool to catch me. Thank you @IncodeIdentity for having me hack you 110 times to find the latest vulns and fix them together 🤖🤘

Canvas, the tool teachers and students are using for finals right now, was hit w/ ransomware by (folks who claim to be) ShinyHunters. Lots of students/educators saying this is making finals studying/tests v hard (not even considering the amount of data likely to be leaked here)!

Canvas is hacked and stressing out 230 Million students, teachers and staff during finals. What does this mean and how do we stay safe? What are the next steps for the 8,800 affected schools during finals. Answered below in my video:

this presentation by @RachelTobac today was both shocking and fascinating

RT @RachelTobac: @Chris_Yeung98 @socialproofsec Ha thanks for asking!! We are about to hit our 1 MILLIONTH user!!

RT @Chris_Yeung98: How many users have used the @socialproofsec training video @RachelTobac? Can’t believe it’s been 3 years, 1 month, and…

.@socialproofsec Co-Founder & CEO @RachelTobac joined @JillMalandrino to discuss how to spot a deepfake video and how the technology is constantly evolving. Watch the full video: spr.ly/6017fFdF7

10 seconds.... Enable passkeys and phishing-resistant MFA wherever you can!

Well worth the watch for (1) education/safety, and (2) Rachel is awesomely cool with this stuff.

The @ScammerPayback podcast was one of my favorite interviews of all time. I got to: - do hard OSINT on Daniel, present my findings live and shock the glasses off him multiple times - live hack his bank account in front of him by calling his friends and using AI voice clones to take over his account - talk about the changes in hacking due to AI - discuss how AI psychosis happens from a neuroscience perspective - tell a never before heard story about how I almost got the worst job in history - and what we can do to protect people from scammers in 2025 in our personal and professional life. This is also probably the funniest interview I've done in years. I haven't gotten to laugh this hard on camera in a while. youtube.com/watch?v=xEdZwLRJ…

*New live hack demo - stealing security question answers with AI voice clones* At @defcon I went on @ScammerPayback podcast and hacked @daniel_payback by calling his friends & stealing answers to his bank's password reset identity questions using a voice clone within 10 seconds.

Me and @davegerryjr are live on @Nasdaq @TradeTalks right now with a live video and audio deepfake, security insights and takeaways to protect your family and company!

.@bugcrowd @socialproofsec & @ParameterHacker join @JillMalandrino on @Nasdaq TradeTalks to discuss the methodologies of ethical hackers and building a resilient cybersecurity culture. x.com/i/broadcasts/1YqGolNVl…

Big thanks to @socialproofsec for supporting the social engineering community at the Platinum level. We appreciate you! #SocialProofSec

Time for a hint! To solve the @socialproofsec @defcon 33 Clue Hunt challenge this year: we recommend using something straight to solve it.

The @socialproofsec @defcon 33 Clue Hunt in ON! This challenge is short, it’s just 1 clue. Coin & sticker will both be of value. Intersect to gain the clearest view. Tell me, @evantobac, or Keymaster the secret word IRL or DM to win a Hacker Buff for you. Find us at @sec_defcon.