Security Week: Exploring AI-Assisted Social Engineering Attacks to Help Prepare Leaders for What Lies Ahead in 2026
SecurityWeek interviewed NetSPI’s Director of Social Engineering, Patrick Sayler, for Cyber Insights 2026 exploring AI-assisted social engineering attacks to help prepare leaders for what lies ahead in 2026. Read the preview below or view it online.
+++
Patrick Sayler, Director of Social Engineering at NetSPI, highlights the growing threat of AI-assisted social engineering in SecurityWeek’s Cyber Insights 2026. He emphasizes that the most successful breaches now exploit trust rather than technical vulnerabilities, leveraging AI to automate deception at scale. From hyper-personalized phishing campaigns to deepfake-driven attacks, AI is reshaping the landscape, making social engineering more sophisticated and harder to detect.
Patrick advocates for prevention through process redesign and mindset shifts. He suggests adopting workflows that encourage verification, such as requiring multiple approvals for sensitive actions, and fostering a culture of skepticism. By integrating zero-trust principles into human behavior and adapting communication protocols, organizations can better defend against these evolving threats.
You can read the full article here.
Authors:
Explore More News
Canvas breach puts global education cyber risk in focus
ITBrief interviewed NetSPI's Field CISO, Nabil Hannan, for a May 24, 2026 article about a major data breach in Instructure's Canvas learning management system disrupting final exams at universities.
Microsoft is working on a patch for ‘YellowKey’ attack on BitLocker, offers temporary fix
CSO Online interviewed NetSPI's VP of Research, Karl Fosaaen, for a May 20, 2026 article about how Microsoft is working on a patch for a zero-day vulnerability dubbed "YellowKey" (CVE-2026-45585).
AI-powered Continuous Pentesting
NetSPI® launches AI-powered Continuous Pentesting to help organizations validate and reduce risk through their Human-led, AI-accelerated platform that supports continuous penetration testing and agentic MCP integrations.