The Human Perimeter

One email lands in the inbox: A supplier invoice. A SharePoint link. A DocuSign request. A password reset. A domain renewal notice. Nothing dramatic. Just work. In Episode 5, Simon and Andre take apart the phishing email that fools a whole company. Not the cartoon spam with bad spelling. The good one. The one that looks like the tools, vendors, bosses, deadlines, and workflows people already trust...

You know the link looks strange. You click anyway. Why? Social engineering does not target your intelligence first. It targets the moment around it: pressure, trust, fear, curiosity, fatigue, and routine. In Episode 4, Simon and Andre look at why smart people fall for scams. Not because they are careless. Because attackers design messages for the brain people actually use at 4:47 p.m., between two...

In November 2023, the FBI and CISA put out a joint advisory on one of the most effective cybercriminal groups operating today: Scattered Spider. What makes them unusual isn't the malware or the exploits. It's that they barely need any. A phone call, a convincing story, and a help desk employee trying to be helpful — that's often all it takes. In this solo episode, André breaks down exa...

The security industry has called people the weakest link for 30 years. Cybersecurity psychologist Inge Wetzer says the weakness isn't in the people — it's in how the industry understands them. André and Simon dig into why that framing is wrong, why training theater backfires, and what it actually means to treat people as the perimeter.

A CFO who knew 15 precise account numbers across 5 banks. A group of senior executives all agreeing in real time. A confidential transaction that couldn't be discussed with anyone else. Every one of those details was a red flag. None of them were caught. In this episode, Simon unpacks the infrastructure and authentication breakdown behind the $25M Arup deepfake fraud. André applies Red Team th...

In this introductory episode, André Daus and Simon Gajdosik lay out why The Human Perimeter exists — and why it takes a different angle than almost every other cybersecurity show out there. The cybersecurity industry has spent decades blaming people for breaches. We think the framing is wrong, and we're going to spend a lot of episodes proving it. One host comes from the infrastructure side —...