Every phishing lure, vishing call, and impersonation attempt starts with the same raw material: the personal data your employees leave scattered across the open web, data broker sites, and social media. Attackers no longer need to break in when they can simply convince you to open the door. This exposed information represents an organization’s human attack surface, and right now it an attacker’s favor weapon.
In this session, Kurtis Minder examines how threat actors weaponize openly available personal data to make social engineering faster, cheaper, and more convincing, and why traditional security controls rarely account for it. Drawing on real reconnaissance techniques and current threat intelligence, he shows what the attacker sees before they ever send a message, and how reducing that exposure changes the economics of the attack.
Attendees will leave with a practical framework for measuring and shrinking their organization’s human attack surface, turning a persistent blind spot into a defensible advantage.
