Hacker & CEO @SocialProofSec security awareness/social engineering training, videos, talks | 3X @DEFCON🥈 | Ex Chair @WISPorg | Ex @CISAgov Technical Advisory Council under Director Jen Easterlyhttps://bsky.app/profile/racheltobac.bsky.socialhttps://bsky.app/profile/racheltobac.bsky.social/post/3mruvemie3s2bThe new “⚠️Seems like AI slop” button on LinkedIn is sending me into orbit lmao30 Jul 2026 16:47 +0000at://did:plc:armlxmcieuszmzxjn66fpapi/app.bsky.feed.post/3mruvemie3s2bhttps://bsky.app/profile/racheltobac.bsky.social/post/3mr5yr63t5s2uWas curious if I could use AI (Graylark) to find coordinates of this house using just a *reflection in a keypad* of the surroundings. Well...it worked. YIKES. Daniel Heinen does not make this AI tool available to the public for this reason. https://youtube.com/shorts/Xzbvi-Y1u1w?feature=share21 Jul 2026 14:17 +0000at://did:plc:armlxmcieuszmzxjn66fpapi/app.bsky.feed.post/3mr5yr63t5s2uhttps://bsky.app/profile/racheltobac.bsky.social/post/3mp4y367jqc2tThis year WISP is sending 41 Scholars to @defcon.bsky.social / @blackhatevents.bsky.social to find their community, new skill, or next job! I just donated $1K to cover 1 scholar’s WISP support team, swag, events, community room, etc. Who’s matching me! wisporg.app.neoncrm.com/forms/wisphsc2625 Jun 2026 17:41 +0000at://did:plc:armlxmcieuszmzxjn66fpapi/app.bsky.feed.post/3mp4y367jqc2thttps://bsky.app/profile/racheltobac.bsky.social/post/3mnznc6nvmk2eDoing an AMA style panel for our ContinuumCon opening keynote tomorrow! We need your questions to answer, drop them below! What do you want us to talk about? List anything you want to know more about below! Cc: @johnhammond.bsky.social @rekdt.com @jun34u.bsky.social continuumcon.com/schedule/ https://continuumcon.com/schedule/11 Jun 2026 16:25 +0000at://did:plc:armlxmcieuszmzxjn66fpapi/app.bsky.feed.post/3mnznc6nvmk2ehttps://bsky.app/profile/racheltobac.bsky.social/post/3mndctgst2c2lWHOA Google let me know they saw my tweet last year & built a tool to defend against the exact call spoofing + AI voice clone attack! As of *today*, fake call detection on Android alerts when someone is impersonating your contact. Thread and demo below:02 Jun 2026 19:20 +0000at://did:plc:armlxmcieuszmzxjn66fpapi/app.bsky.feed.post/3mndctgst2c2lhttps://bsky.app/profile/racheltobac.bsky.social/post/3mmto5qjgyk2bI used deepfakes & injection attacks to hack an identity verification tool used for remote workforce, helpdesk, & onboarding…until they updated the tool to catch me. Thank you @incode.bsky.social for having me hack you 110+ times to find the latest vulns and fix them🤖🤘 Full vid: youtu.be/pAegYkwWIgE27 May 2026 14:00 +0000at://did:plc:armlxmcieuszmzxjn66fpapi/app.bsky.feed.post/3mmto5qjgyk2bhttps://bsky.app/profile/racheltobac.bsky.social/post/3mlmtfnbsek2dWhoa, Instructure (who owns Canvas) says they came to an agreement with the cyber criminals (typically this means a ransom was paid) in exchange for the stolen data being deleted instead of leaked and criminals ceasing all extortion requests from customers. Huge development. [contains quote post or other embedded content]12 May 2026 03:20 +0000at://did:plc:armlxmcieuszmzxjn66fpapi/app.bsky.feed.post/3mlmtfnbsek2dhttps://bsky.app/profile/racheltobac.bsky.social/post/3mlciyipp4c2dCanvas is hacked and stressing out 230+ million students, teachers and staff during finals. What does this mean and how do we stay safe? What are the next steps for the 8,800 affected schools during finals. Answered below in my video:08 May 2026 00:47 +0000at://did:plc:armlxmcieuszmzxjn66fpapi/app.bsky.feed.post/3mlciyipp4c2dhttps://bsky.app/profile/racheltobac.bsky.social/post/3mk724c37sk2uHave you received a party invite that turned out to be fake (a scam!) in the last 6 months?! I just broke down how this scam works for the @nytimes.com, dive into the 2 distinct paths this scam follows, how to catch it, and how to reduce its impact if you do click: https://www.nytimes.com/2026/04/23/style/invitation-phishing-scam.html23 Apr 2026 22:17 +0000at://did:plc:armlxmcieuszmzxjn66fpapi/app.bsky.feed.post/3mk724c37sk2uhttps://bsky.app/profile/racheltobac.bsky.social/post/3mjk6f2scac2eWant my thoughts on Anthropic's Mythos risk vs hype, how I use AI to bypass identity verification systems now, & more? Tune in for my Rapid7's 2026 Global Cybersecurity Summit keynote panel 5/12 with Graham Cluley, Raj Samani, Brian Honan! Join me here: rapid7.brighttalk.com15 Apr 2026 15:08 +0000at://did:plc:armlxmcieuszmzxjn66fpapi/app.bsky.feed.post/3mjk6f2scac2ehttps://bsky.app/profile/racheltobac.bsky.social/post/3mdg455qmzc2hIf you’re an activist, journalist, exec, or have a high threat model for any other reason, I do recommend using all tools to protect against spyware including Apple’s lockdown mode and WhatsApp’s new Strict Account Settings. Thanks WhatsApp for the partnership to get the word out to folks.27 Jan 2026 15:46 +0000at://did:plc:armlxmcieuszmzxjn66fpapi/app.bsky.feed.post/3mdg455qmzc2hhttps://bsky.app/profile/racheltobac.bsky.social/post/3mcfjhyazks2yThe repairable, customizable, build-it-yourself, physical webcam & mic kill switch, Linux compatible, port swappable @frame.work laptop has hit the SocialProof office 🤖🤘14 Jan 2026 16:47 +0000at://did:plc:armlxmcieuszmzxjn66fpapi/app.bsky.feed.post/3mcfjhyazks2y