In plain English
Social engineering attacks target people, not technology. Phishing, vishing, smishing, pretexting, and tailgating are all forms of social engineering. Because they exploit human instincts — trust, authority, fear, urgency — they are often more effective than technical attacks, and no amount of patching will stop them. Security awareness training and robust verification processes are the primary defences.
