--- title: "Social Engineering Leveled Up. Has Your Security Program?" url: https://daily.dev/posts/social-engineering-leveled-up-has-your-security-program--0tahlxa2t source_url: https://www.huntress.com/blog/device-code-phishing-cyber-resilience-strategy type: article source: "Huntress Blog" published: 2026-05-31T07:42:49.721Z updated: 2026-05-31T09:07:30.220Z tags: ["security", "phishing"] reading_time: 10 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Social Engineering Leveled Up. Has Your Security Program? **[Huntress Blog](https://daily.dev/sources/huntress-blog)** · 10 min read · 0 upvotes · 0 comments ## Summary Modern social engineering has evolved beyond detectable attacks into techniques that blend seamlessly into trusted workflows, legitimate platforms, and everyday tools. Key threats include device code phishing (EvilTokens/Railway campaign) that bypasses MFA by stealing OAuth session tokens, AI-powered deepfakes impersonating executives and candidates, malicious search results mimicking legitimate software installers, and calendar/SaaS workflow abuse. Only 8.9% of security teams identify phishing as their biggest gap, yet 26.5% feel least prepared for identity-based attacks and 32% lack ITDR capabilities. The core argument is that prevention-first security models are failing because attackers now operate inside trusted infrastructure. Resilient teams are shifting toward speed over volume, behavioral detection over static indicators, clear ownership of incident response, and cross-tenant identity visibility to limit damage and recover quickly. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Tech Can't Stop These Threats — Your People Can](https://daily.dev/posts/tech-can-t-stop-these-threats-your-people-can-mignnpph4) · Dark Reading · 1 upvotes · 0 comments - [Top techniques attackers use to infiltrate your systems today](https://daily.dev/posts/top-techniques-attackers-use-to-infiltrate-your-systems-today-38bwedayy) · CSO Online · 0 upvotes · 0 comments - [You should be aware of these latest social engineering trends](https://daily.dev/posts/you-should-be-aware-of-these-latest-social-engineering-trends-g6qsdftjr) · CSO Online · 2 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#phishing](https://daily.dev/tags/phishing) [View this post on daily.dev](https://daily.dev/posts/social-engineering-leveled-up-has-your-security-program--0tahlxa2t)