The Threat of the Human Attack Surface Picnic CEO Matt Polak shares practical steps that businesses can take to protect themselves from ransomware, including simulating social engineering attacks, safeguarding the human
The Threat Show! Ep. 29 with guest Matt Polak Read More
Picnic is the first platform I’ve seen that can map threat intelligence to an organization’s employee population and proactively mitigate the risk of humancentric attacks.” — Chris Key, former Chief
Social engineers collect intelligence on human targets to develop paths for attack and compromise. Picnic’s platform emulates this external, human attack surface reconnaissance to expose Target Intelligence about an organization.
Picnic Target Intelligence Report: Mailchimp Read More
The exploitation of human attack surface data and a crucial intelligence gap According to Verizon’s 2022 DBIR report, stolen passwords and phishing were the top two techniques used by threat
Download PDF Incident Name: Kodi February 2023 Data Breach Date of Public Report: April 8th, 2023 Date of Incident: February 16th and 21st, 2023 Summary: Kodi is an open-source media
Kodi February 2023 Data Breach Read More
Social engineers collect intelligence on human targets to develop paths for attack and compromise. Picnic’s platform emulates this external, human attack surface reconnaissance to expose Target Intelligence about an organization.
Picnic Target Intelligence Report: Uber Read More
Did you know credential compromise was the single largest source of breaches last year?* That’s why incorporating credential-stuffing security practices into your organization’s security strategy is more crucial than ever.
Mitigating Credential Compromise and Preventing Credential Stuffing Attacks Read More
Everyone knows the human element is the single largest attack vector and security risk. I invested in Picnic because I believe their technology can change the game for security teams.”—
Download PDF Incident Name: Activision December 2022 Social Engineering Attack and Data Breach Date of Public Report: February 27th, 2023 Date of Incident: December 4th, 2022 Summary: Activision is a
Activision Dec 2022 Social Engineering Attack and Data Breach Read More
Most cybersecurity whitepapers start with a scary anecdote, a statistic on annual losses in the billions, some specifics on hard-hit industries or recent attack variations, and then move on to
Practical guide to secure your organization against credential stuffing attacks Read More
Compromised employee credentials are a major threat to any organization’s cyber security. According to Verizon’s 2022 Data Breach Investigation Report, compromised credentials were the single largest source of breaches, accounting
Download PDF Incident Name: Coinbase Social Engineering Attack Date of Incident: February 5th, 2023 Summary: Coinbase is an American cryptocurrency exchange platform. On February 5th, 2023, the company came under
Coinbase Feb 2023 Social Engineering Attack Read More
Download PDF Incident Name: Reddit Feb 2023 Social Engineering Attack and Data Breach Date of Incident: February 5th, 2023 Summary: Reddit, a popular news and social media platform, announced recently
Reddit Feb 2023 Social Engineering Attack and Data Breach Read More
Written by Karen Walsh Phishing scams and other social engineering attacks work because cybercriminals use people’s digital footprints against them. Threat actors scrape social media and the internet, looking for
Focus on security education, not cyber awareness training Read More
Cybercriminals do what they do for money. According to the 2022 Data Breach Investigations Report, 96% of data breaches were caused by external actors motivated by financial or personal gain.
CEO fraud: Protecting executives protects everyone Read More
What you’ll learn: What social engineering is Why social engineering matters Which organizations should be concerned Which individuals should be concerned Why current solutions fail to stop attacks How to
Social engineering: What you need to know Read More
The Role of OSINT in social engineering and how to manage your human attack surface Picnic CEO Matt Polak recently joined award-winning journalist Steven Bowcut of the Brilliance Security Magazine Podcast to discuss the role of
Brilliance Security Podcast – S4E20 Read More
Social engineers collect intelligence on human targets to develop identity paths for attack and compromise. Picnic emulates this external, human attack surface reconnaissance to provide customers with Target Intelligence about
Picnic Target Intelligence Report: Twilio Read More
Every day, people follow a set of digital routines. Some people read the news online while drinking their morning coffee. Others check their work email from their smartphone. Still others
Your digital footprint: It’s bigger than you realize Read More
Picnic is excited to be featured on Startup to Follow’s list of the top startups of 2022! Check out their list of other innovative startups that are changing the world.
Top startups of 2022 Read More
Exploitation through easily accessible sensitive personal information is the single largest threat to companies and their people today. It’s how nearly all cyber-attacks begin and is at the root of
DOWNLOAD E-BOOK Exploitation through publicly available information is the single largest threat to companies and their people today. Known as Open-Source Intelligence, or OSINT, this public data reveals to hackers
Essential guide to open-source intelligence (OSINT) Read More
Protecting People and Companies from Social Engineering Attacks Picnic is a cybersecurity firm going after an aspect of risk that the industry doesn’t spend nearly enough time talking about: attacks by
Rally Ventures: Why we invested in Picnic Read More
SANS Cyber Solutions Fest ’22 Webinar with Jim Somborovich, Cybersecurity Leader and Veteran (USMC) SOC teams have historically not had adequate visibility of the public data footprint of their organization
Improving the SOC team’s posture against social engineering attacks Read More
