0x662 - H'umain - L'ingénierie sociale, les biais cognitifs et la formation en entreprise

0x662 - H'umain - L'ingénierie sociale, les biais cognitifs et la formation en entreprise

by PolySécure Podcast

Humanities, Social Sciences & Thought Computing & Cybersecurity URComputer securityURHComputer fraud and hacking
🎙 PolySécure Podcast 👥 540 📅 November 13, 2025 ⏱ 29 min 👁 42 📄 expert opinion 🧭 2026-08-16
Available in: English (current) Français

Keywords

social engineeringphishingvishingsmishingcognitive biasesurgency biasauthority biasreciprocity biasconformity biasamygdala hijackingoxytocinno blame culturegamificationOSINTpretextingphysical intrusionsecurity awarenesshuman factorcybersecurity training

Summary

In this podcast episode, Youna Chosse-Bentabed, a network security engineer turned social engineering specialist, discusses the art of manipulating people to obtain information. She explains that social engineering encompasses phishing, vishing, smishing, and physical intrusion, and that everyone is exposed to these attacks daily. She highlights the importance of a ’no blame’ culture in corporate training, where employees are not punished for falling for attacks but are educated and supported. The conversation delves into cognitive biases exploited by attackers, such as the urgency bias, which triggers ‘amygdala hijacking’ and reduces reasoning by 60%, and the authority, reciprocity, and conformity biases. Defense strategies include regular, practical training, immediate feedback after a simulated attack, and taking 20-30 seconds to breathe and reflect before acting on urgent requests. Youna also discusses the ethical approach of leaving people better than you found them, avoiding fear-based tactics, and leveraging oxytocin, the trust hormone, to build rapport. She outlines the preparation of a typical mission, including legal protections and OSINT reconnaissance. Finally, she touches on the broader implications of social engineering in disinformation and political manipulation, emphasizing the need for information vigilance and self-awareness.

188 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable insights into social engineering, particularly the psychological mechanisms behind successful attacks and the importance of a constructive, non-punitive approach to security training. The argumentation is coherent and grounded in the expert’s practical experience, with concrete examples and actionable advice. The discussion on cognitive biases and the role of oxytocin adds depth, though some claims (e.g., 72% statistic) lack direct sourcing. The emphasis on ethical practices and the ’no blame’ culture is a strong point, offering a refreshing perspective in the cybersecurity field.

Scientific Rigor, Source Quality, Title Accuracy

The video is an interview with a recognized expert, but it lacks explicit citations or references to scientific studies. The title accurately reflects the content, focusing on the human element of cybersecurity. The description provides some context and mentions Christopher Hadnagy as a reference, but no external sources are cited. The content is based on the expert’s professional experience and training, which lends credibility, but the lack of verifiable sources limits its scientific rigor. The title-content alignment is good, and the video does not overpromise or mislead.

188 words

Title / Content Match

The title accurately reflects the content, which focuses on the human aspect of cybersecurity, cognitive biases, and corporate training.

Quality & Reliability

7/10

The video features a recognized expert in social engineering, trained by Christopher Hadnagy, and provides concrete, practical insights. However, it is primarily an interview/opinion piece without detailed citations or verifiable data, and the statistics mentioned (e.g., 72%) are not sourced.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

Concurring Sources

  • Social Engineering: The Art of Human Hacking — Book by Christopher Hadnagy, a foundational reference in social engineering.

Contribution & Novelties

The video offers a practical and ethical perspective on social engineering, emphasizing the importance of understanding human psychology and cognitive biases. It provides actionable advice for organizations to improve their security posture through continuous training and a supportive culture. The discussion on oxytocin and the ethical use of trust is a unique angle that goes beyond typical technical discussions.

Pour aller plus loin :

  • Social engineering (security) — Overview of social engineering concepts.
  • Cognitive bias — Comprehensive list and explanation of cognitive biases.
  • Amygdala hijack — Explanation of the amygdala’s role in emotional responses.
  • Oxytocin — Overview of the hormone’s functions, including trust and social bonding.
  • OSINT — Definition and techniques of open-source intelligence.

114 words

Radar Profile

The radar profile shows high scores in quantity of information and fiabilité, reflecting the expert's depth of knowledge and practical experience. The niveau technique is moderate, as the content is accessible to a general audience. The overall profile indicates a well-rounded, informative discussion.

Reliability 7/10

💬 No comments were provided for analysis.