Author | Lightnews

Christina Lekati @christinalekati.bsky.social · Aug 4

Report by Google (government-backed threat actor use of the Gemini): cloud.google.com/blog/topics/...

Adversarial Misuse of Generative AI | Google Cloud Blog

We share our findings on government-backed and information operations threat actor use of the Gemini web application.

cloud.google.com

1 2

Christina Lekati @christinalekati.bsky.social · Aug 4

2 additional reports on how GenAI has been used in social engineering attacks. They provide a more holistic understanding on how these tools are being used by adversaries:

Report by Anthropic (Claude): www.anthropic.com/news/detecti...

Detecting and Countering Malicious Uses of Claude

www.anthropic.com

1 1

Christina Lekati @christinalekati.bsky.social · Aug 4

🔹 I know that some of you in my network (and some of our clients) had to deal with the attacks documented. This will hit home.

🔹 Ultimately, we can use this report help us further improve our defense strategies with reality in mind.

1

Christina Lekati @christinalekati.bsky.social · Aug 4

🔹 The operations described in the report help give us a better understanding of how threat actors are *realistically* trying to abuse GenAI models. No guesses, no fancy assumptions, just the observed TTPs.

1

Christina Lekati @christinalekati.bsky.social · Aug 4

3 resources in 1 post:
Open AI has released a new report outlining the ways in which threat actors used their generative AI products to support their social engineering attack operations. They provide the case studies.

openai.com/global-affai...

Why is this useful? 🧵

Disrupting malicious uses of AI: June 2025

Our latest report featuring case studies of how we’re detecting and preventing malicious uses of AI.

openai.com

1 4

Christina Lekati @christinalekati.bsky.social · Jul 16

Happy news!! This September at @brucon we will be taking a deep dive into #socialengineering and #OSINT through a 3-day, hands-on training class!
I SO look forward to it and to meeting the participants!! 🤩👩🏻‍💻

Full class content & details: www.brucon.org/training-det...

3

Christina Lekati @christinalekati.bsky.social · Jun 17

Always fun hanging out with you @cyber.coffee! 🙌🏻

1

Christina Lekati @christinalekati.bsky.social · Jun 17

Very grateful for last week spent at X33fcon in Poland!
It started with 2 days full of #socialengineering & #OSINT training where I had the privilege to teach a class that was present, curious, and ready to try things out.
Big bonus: reconnecting with friends during the conference days afterwards😊

1 1 3

Reposted by Christina Lekati

Christina Lekati @christinalekati.bsky.social · May 21

Agentic AI has opened new frontiers for adversaries looking to automate and scale attacks.

I wrote an article explaining what Agentic AI really is & how it can shape the future of the social engineering threat landscape.

christina-lekati.medium.com/when-ai-goes...

When AI Goes Rogue: How Agentic AI Will Reshape Social Engineering Attacks

Cyber criminals are rarely late to the game when it comes to new technologies. In fact, they’re often among the first ones to experiment…

christina-lekati.medium.com

2

Christina Lekati @christinalekati.bsky.social · May 21

Agentic AI has opened new frontiers for adversaries looking to automate and scale attacks.

I wrote an article explaining what Agentic AI really is & how it can shape the future of the social engineering threat landscape.

christina-lekati.medium.com/when-ai-goes...

When AI Goes Rogue: How Agentic AI Will Reshape Social Engineering Attacks

Cyber criminals are rarely late to the game when it comes to new technologies. In fact, they’re often among the first ones to experiment…

christina-lekati.medium.com

2

Christina Lekati @christinalekati.bsky.social · May 7

There are a few things different this time around. 👇🏻

New class modules:
🔸️State-Sponsored social engineering schemes
🔸️Using AI for OSINT tasks (responsibly)
🔸️How attackers are using AI to supercharge their SE.

Hands-on, practical & realistic. See you at x33fcon in only 4 weeks! 😱🥳

Christina Lekati @christinalekati.bsky.social · May 2

Note: HUMINT in CTI is not meant to replace the technical analysis, but to complement it. It fills in gaps with intel that cannot be found through the technical analysis or other passive intel disciplines - e.g. motives, future targets, skill/group developments, future plans, etc

Christina Lekati @christinalekati.bsky.social · May 2

If you are using #HUMINT techniques in your #CTI process, this is a talk worth watching.
Eliska & Julien do a great job in breaking down important concepts, risks, benefits & analytical aspects of using HUMINT tactics in a CTI workflow ⬇️

youtu.be/o1TTO5d1DXQ?...

It's so overt it's covert: leveraging classic HUMINT tactics in CTI investigations

YouTube video by SANS Digital Forensics and Incident Response

youtu.be

1

Reposted by Christina Lekati

Dutch_OsintGuy @dutchosintguy.bsky.social · Apr 2

New blog: The Slow Collapse of Critical Thinking in OSINT due to AI

"OSINT used to be a thinking game. Now it’s becoming a trusting game and that should terrify you."

#OSINT #OSINT4good #AI

Read the blog here: www.dutchosintguy.com/post/the-slo...

7 22 58

Christina Lekati @christinalekati.bsky.social · Mar 31

Class Details & Registration:
www.x33fcon.com?fbclid=IwAR2...

x33fcon

www.x33fcon.com

Christina Lekati @christinalekati.bsky.social · Mar 31

...and of course:

🔹 Blue Team Countermeasures: How to disrupt social engineering attacks & create a defense strategy.

...but there will also be some surprises 🤫 ✨ ✨

If you're attending #x33fcon this year I look forward to seeing you there! 👋🏻

x33fcon

www.x33fcon.com

1 2

Christina Lekati @christinalekati.bsky.social · Mar 31

🔹 The use of AI in all phases of the social engineering kill-chain.

🔹 OSINT: How to conduct reconnaissance on a target (business / person) and what to look for.

🔹 Highly practical open-source intelligence (OSINT) tools & techniques that facilitate attack scenarios.

1 1

Christina Lekati @christinalekati.bsky.social · Mar 31

We will cover:

🔹 Timeless Social Engineering Attack Scenarios: The tricks that keep working (and why).

🔹 The Psychology behind social engineering (we will go well beyond influence tactics!!)

🔹 Hybrid & advanced attack techniques that combine multiple attack verticals.

1

Christina Lekati @christinalekati.bsky.social · Mar 31

Surprise! Really excited to announce that the next "𝑺𝒐𝒄𝒊𝒂𝒍 𝑬𝒏𝒈𝒊𝒏𝒆𝒆𝒓𝒊𝒏𝒈 & 𝑶𝒑𝒆𝒏-𝒔𝒐𝒖𝒓𝒄𝒆 𝑰𝒏𝒕𝒆𝒍𝒍𝒊𝒈𝒆𝒏𝒄𝒆 𝒇𝒐𝒓 𝑺𝒆𝒄𝒖𝒓𝒊𝒕𝒚 𝑻𝒆𝒂𝒎𝒔" open class will be happening at x33fcon in Gdynia, Poland!!

This is an intensive, 2-day training 🧵

1 1 3

Christina Lekati @christinalekati.bsky.social · Mar 25

Sure, there is no perfect OPSEC, and there is no perfect intelligence department. However, that a pretty major error and we can all learn from it.

Christina Lekati @christinalekati.bsky.social · Mar 25

🔹️ The fact that experienced, OPSEC-aware, national-security leaders in this administration don't act with security in mind, which we can assume happens in more than one ways. Even on such a fundamental level.

Christina Lekati @christinalekati.bsky.social · Mar 14

Not that hotel rooms have the best locking mechanisms, but leaving a room fully accessible after exiting is a whole other level. Check your doors when you leave, people.