Social Engineering in Cyber Security | Types & Tactics

Social engineering in cyber security is the practice of manipulating people, rather than exploiting software or hardware flaws, into handing over confidential information, granting system access, or taking an action that compromises security. Instead of breaking through a firewall, an attacker convinces an employee to click a link, approve a login request, or share a password over the phone.

It’s less a hacking technique than a psychological one, and it’s remarkably effective: Verizon’s 2025 Data Breach Investigations Report found that the human element, errors, manipulation, or misuse, was a factor in roughly 60% of confirmed breaches.