Cyber Defense Magazine published an article by Patrick Sayler, NetSPI’s Director of Social Engineering, exploring how everyday social media habits are quietly fueling a dangerous new wave of cyberattacks: AI‑powered voice fraud. Read the preview below or view it online.

+++

Social media has long been a valuable source of personally identifiable information (PII) for cybercriminals, but the rise of AI-driven cloning has created a new layer of risk.

According to a Pew Research Center survey, 78% of U.S. adults trust themselves to make the right decisions about sharing their personal information online. However, a 2024 survey from Secure Data Recovery argues against this self-assessment, finding that 89% of U.S. adults believe that people share too much on social media in general. This misplaced confidence can have serious consequences in an era where as little as 20 to 30 seconds of recorded speech, the length of most social media clips, can be enough to clone someone’s voice with startling accuracy.

This growing overlap between self-expression and employee and enterprise exposure is creating a new enterprise security concern that traditional defenses are not designed to address – and the rapid rise of generative AI is raising the stakes. In particular, voice cloning technology has become startlingly efficient. As employees increasingly use social media to connect and share, they are also creating vast libraries of voice data that can be exploited by attackers. This content gives cybercriminals a new, highly personal vector to build credibility and trust in ways that traditional phishing never could.

You can read the full article here.