Pinned Tweet
We are so excited for the new Music and Spoken Hacking Demo security awareness Training Videos we just released! Thank you to the orgs who already signed up, if you prefer to watch a demo without need for a phone call, here’s the form for that! forms.gle/S8QabwwcaYKUySnd7
SocialProof Security retweeted
This type of breach, affecting 153 million individual's licenses, is going to have massive impacts on identity theft, specifically identity verification platform fraud (using front and back scans from this breach to "verify" as another person for financial services and more).
My driver's license is one of 153 million for sale on a new dark website arstechnica.com/security/202…
SocialProof Security retweeted
Super impressed with @huggingface's breakdown of the AI agent autonomous cyber attack from OpenAI, including technical timeline, & interactive replay (AND how they defended against the attack)!
Here is the interactive attack replay vid and source:
huggingface.co/blog/agent-in…
SocialProof Security retweeted
In this exclusive interview with @_The_Executive, Rachel Tobac, CEO of @socialproofsec, reveals how AI has fundamentally changed the way hackers operate and what every business leader needs to know to stay ahead of cyber threats
SocialProof Security retweeted
WHOA @Google let me know they saw my tweet below last year & built a tool to defend against this exact call spoofing + AI voice clone attack!
As of today, fake call detection on Android alerts when someone is impersonating your contact.
Demo & thread of how it catches attackers:
It takes me 2 minutes total to set up a AI voice clone social engineering attack.
I need about 10-15 seconds of a person’s voice to clone it well, spoof a phone call (change caller ID to display another number), and initiate a voice clone attack via call.
Governments need to know how to verify identity of caller outside of caller ID and voice match, NOW!
SocialProof Security retweeted
👀 We asked @socialproofsec to hack us 110+ times.
Independent pentest across 13 attack types: deepfakes, injection attacks, AI-generated docs, emulators, replay attacks.
Zero mobile bypasses.
Full report ↓
incode.com/pentest-socialpro…
SocialProof Security retweeted
One of the coolest parts of my job, getting to hack for good. Test every attack method used in the wild, assume there will be some vulns, and fix them quick.
Get our full Pentest Report from @IncodeIdentity and see what they can do at: incode.com/pentest-socialpro…
SocialProof Security retweeted
Tested mobile & browser: hard/software vid injection, deepfakes, replays, emulators, rooted devices, manipulated ids.
Mobile held up every time. Web flows were the 1 way in. When we got in w/ web hard/software vid injection, we gave those vulns to Incode & they fixed them quick.
SocialProof Security retweeted
I used deepfakes & injection attacks to hack an identity verification tool used for remote workforce, helpdesk, & onboarding…until they updated the tool to catch me.
Thank you @IncodeIdentity for having me hack you 110+ times to find the latest vulns and fix them together 🤖🤘
SocialProof Security retweeted
Canvas, the tool teachers and students are using for finals right now, was hit w/ ransomware by (folks who claim to be) ShinyHunters. Lots of students/educators saying this is making finals studying/tests v hard (not even considering the amount of data likely to be leaked here)!
SocialProof Security retweeted
Canvas is hacked and stressing out 230+ Million students, teachers and staff during finals. What does this mean and how do we stay safe? What are the next steps for the 8,800 affected schools during finals. Answered below in my video:
SocialProof Security retweeted
this presentation by @RachelTobac today was both shocking and fascinating
SocialProof Security retweeted
Replying to @Chris_Yeung98 @socialproofsec
Ha thanks for asking!! We are about to hit our 1 MILLIONTH user!!
SocialProof Security retweeted
How many users have used the @socialproofsec training video @RachelTobac? Can’t believe it’s been 3 years, 1 month, and 13 days since it was posted.
SocialProof Security retweeted
.@socialproofsec Co-Founder & CEO @RachelTobac joined @JillMalandrino to discuss how to spot a deepfake video and how the technology is constantly evolving.
Watch the full video: spr.ly/6017fFdF7
SocialProof Security retweeted
10 seconds....
Enable passkeys and phishing-resistant MFA wherever you can! – at San Diego, CA
*New live hack demo - stealing security question answers with AI voice clones*
At @defcon I went on @ScammerPayback podcast and hacked @daniel_payback by calling his friends & stealing answers to his bank's password reset identity questions using a voice clone within 10 seconds.
SocialProof Security retweeted
Well worth the watch for (1) education/safety, and (2) Rachel is awesomely cool with this stuff.
*New live hack demo - stealing security question answers with AI voice clones*
At @defcon I went on @ScammerPayback podcast and hacked @daniel_payback by calling his friends & stealing answers to his bank's password reset identity questions using a voice clone within 10 seconds.
SocialProof Security retweeted
The @ScammerPayback podcast was one of my favorite interviews of all time. I got to:
- do hard OSINT on Daniel, present my findings live and shock the glasses off him multiple times
- live hack his bank account in front of him by calling his friends and using AI voice clones to take over his account
- talk about the changes in hacking due to AI
- discuss how AI psychosis happens from a neuroscience perspective
- tell a never before heard story about how I almost got the worst job in history
- and what we can do to protect people from scammers in 2025 in our personal and professional life.
This is also probably the funniest interview I've done in years. I haven't gotten to laugh this hard on camera in a while.
youtube.com/watch?v=xEdZwLRJ…
SocialProof Security retweeted
*New live hack demo - stealing security question answers with AI voice clones*
At @defcon I went on @ScammerPayback podcast and hacked @daniel_payback by calling his friends & stealing answers to his bank's password reset identity questions using a voice clone within 10 seconds.
SocialProof Security retweeted
Me and @davegerryjr are live on @Nasdaq @TradeTalks right now with a live video and audio deepfake, security insights and takeaways to protect your family and company!
.@bugcrowd @socialproofsec & @ParameterHacker join @JillMalandrino on @Nasdaq TradeTalks to discuss the methodologies of ethical hackers and building a resilient cybersecurity culture. xitter.cf/i/broadcasts/1YqGolNVl…
SocialProof Security retweeted
.@bugcrowd @socialproofsec & @ParameterHacker join @JillMalandrino on @Nasdaq TradeTalks to discuss the methodologies of ethical hackers and building a resilient cybersecurity culture. xitter.cf/i/broadcasts/1YqGolNVl…




















