Resources

Research, field notes, and live sessions on understanding attacks and validating your defenses.

October 16, 20268 min read

The App Was Approved. Its Integration Token Was Stolen.

October 16, 20266 min read

Supplier Bank-Detail Changes: Test the Approval Without Moving Money

October 16, 20266 min read

Support Asked for a HAR File. What Are You Sending?

October 16, 20266 min read

An External Teams Contact Says They Are IT. How Do You Check?

October 16, 20267 min read

From Social Engineering to a Technical Test: Agree on the Handoff

October 16, 20264 min read

Your Booking Is Real. Is the New Payment Request?

October 16, 20264 min read

A USB Arrived in the Mail. Who Should Connect It?

October 16, 20263 min read

The Technician Is Here. Who Approved the Visit?

October 7–8, 2026Toronto, Canada

GhostEye at SecTor 2026

September 24–25, 2026Grand Rapids, MI

GhostEye at GrrCON 2026

September 18, 202612 min read

How to Measure a Help-Desk Vishing Assessment

September 17, 20266 min read

UNC6040: Follow the Support Call to the Application Authorization

Your first campaign is on us.

Run a campaign, review what happened, and decide what to fix. Agree on the people, systems, and stopping point before testing starts.

Request Your Free Campaign