Social Engineering Just Got Smarter

This report recounts a red-team engagement where AI-enhanced OSINT significantly aided physical social engineering against a high-rise: operators used AI to discover building events, employee attire, badge images, security controls, guard arrangements, and alternative entrypoints (retail, parking, freight elevator), enabling impersonation, forged badges, and manipulation of multiple guard services to gain internal access. The author warns that public and AI-synthesized information can be weaponized for physical breaches and urges stronger policies and controls to limit sensitive exposure to AI and external sources.