John Gordon

What serious social engineering looks like - you don't have a chance.

https://simonwillison.net/2026/Apr/3/supply-chain-social-engineering/

"I join a lot of meetings where I find myself needing to install Webex or Microsoft Teams or similar at the last moment and the time constraint means I always click “yes” to things as quickly as possible to make sure I don’t join late."

#jgshare

The Axios supply chain attack used individually targeted social engineering

The Axios team have published a full postmortem on the supply chain attack which resulted in a malware dependency going out in a release the other day, and it involved …

Simon Willison’s Weblog
Apr 3 at 4:50pmWeb