Three recent insider threat cases involving Berkeley, the University of Wyoming, and OpenAI highlight a serious problem with how organizations approach physical security.
Let's break down these three cases: youtu.be/VFg2DIx4Gg8?si=TXSH…
🚨 A cyber incident at Albert Heijn disrupted food deliveries and emptied shelves. Now the Dutch government is considering emergency food reserves.
Read the full story: covertaccessteam.substack.co…
Your next social engineering skill upgrade starts this weekend.
There’s still time to join us October 24–25 for our Elicitation Toolbox Training (ETT) course! Learn more and register: covertaccessteam.com/elicita…
#SocialEngineering #Elicitation #SecurityTraining #Pentesting
🔐 Your front door lock might look solid, but a few millimeters of exposed Eurocylinder can make it vulnerable to snapping.
Even worse, an attacker could potentially replace the lock without you noticing.
Do you know how secure your locks really are?
▶️ youtu.be/ljEb0FZFOGQ?si=xy7_…
Locks, cameras, action! 🎬 If your next physical penetration test had a soundtrack, this would be the opening track.
Because having security measures in place doesn't necessarily mean you're secure.
Listen: youtu.be/m1FV_JWkHAU?si=_qv4…
An OpenAI engineer allegedly bugged an executive conference room, concealing the recording device with... toilet paper. 🧻
Would a wad of toilet paper behind your conference room TV raise suspicion?
Read now: covertaccessteam.substack.co…
Hackers reportedly raised refrigeration temperatures to 50°C across hundreds of French supermarkets, destroying food remotely.
As Europe connects more critical infrastructure to the Internet, are we creating more opportunities for attacks like this?
covertaccessteam.substack.co…
What if the insider threat is targeting YOU, not your organization?
A California engineer suffered repeated illnesses before a hidden camera caught her coworker contaminating her water: covertaccessteam.substack.co…
Being trusted by an organization doesn't make someone trustworthy.
Could AI be making you more vulnerable to social engineering?
Getting frustrated with ChatGPT might seem harmless, but could those emotional habits carry over into real conversations, making you easier to manipulate?
▶️ covertaccessteam.substack.co…
Airports spend millions keeping threats OUT. But what if the threat is already in the cockpit?
A Flydubai co-pilot allegedly tried to seize control mid-flight, exposing a critical weakness in security: trusted insiders.
Read more: covertaccessteam.substack.co…
Another successful Covert Access Training in the books!
Five days of hands-on training in physical security, access control, social engineering, recon, and more—ending with students putting their skills to the test.
Next courses: covertaccessteam.com/covert-…
Rules for black teams: don’t be stupid, don’t get caught.
Getting caught by the client can be part of the test. Getting caught by everyone else—especially when it provides the client no useful information—is another story: covertaccessteam.substack.co…
How can you access a client’s building AND server room—and still fail the engagement?
Because breaking in wasn’t the only objective.
This article looks at how a successful physical pentest can still fail to address the client’s actual security concerns: covertaccessteam.substack.co…
🤖 Made with AI
Want to know how to get valuable information from a seemingly normal conversation?
Our virtual Elicitation Toolbox Training teaches how to guide conversations, uncover information & recognize when the same techniques are being used on you.
Oct 24–25: covertaccessteam.com/elicita…
🤖 Made with AI
Your bank tells YOU to verify requests before handing over sensitive information.
But what happens when the bank falls for the scam?
Attackers reportedly tricked Revolut through a trusted government disclosure channel—and got customer data.
Read: covertaccessteam.substack.co…
What if you were abducted, searched, and restrained? Could you actually escape?
Brian Harris put his assumptions to the test at Ed Calderon’s Counter Custody course. What works in theory can fail under stress.
Read his thoughts on the course: covertaccessteam.substack.co…
💥Our 2027 training calendar is officially live 💥
Whether you want to develop your covert access skills, conduct better physical security audits, sharpen your elicitation techniques, or strengthen your operational planning, we’ve got a full year of training ahead.
Careful what you post online? Your friends, old records, and company breaches can still expose you.
Use OSINT to investigate yourself, find exposed information, and request its removal.
Read how: covertaccessteam.substack.co… | #OSINT #OPSEC
Imagine: A data center hires you to stop intruders reaching its servers.
But the servers depend on cooling equipment outside, behind a chain-link fence. If damaged, repairs could take weeks.
Are you protecting the asset—or everything keeping it running? covertaccessteam.substack.co…
How much information can you get from someone without ever directly asking for it?
October 24–25, we’re running our live, virtual Elicitation Toolbox Course.
Learn rapport building, conversation pivoting, elicitation techniques & more: covertaccessteam.com/elicita…
