The psychological manipulation of people into performing actions or divulging confidential information, often as part of a cybersecurity attack.
Social engineering exploits human psychology rather than technical vulnerabilities. Attackers may use techniques like phishing, pretexting, baiting, or quid pro quo to manipulate employees into providing access or information. This is often the initial vector for insider threats.