14/10/2026
The recent ASOS security incident is a reminder that cybercriminals don't always need to break through technical defences. Sometimes, they simply need someone to trust them.
According to ASOS, an attacker gained access to an ASOS employee account by "impersonating a trusted contact to obtain log in credentials" which were then used to access information on third-party platforms. (More here via BBC News - https://www.bbc.co.uk/news/articles/c3zxjdw5ywgpo)
It's a real-world example of social engineering and something we've been exploring in our recent Cycubix insights.
Attackers exploit trust, authority and urgency to manipulate human behaviour. And while security awareness is important, protecting an organisation can't rely on employees recognising every threat, every time.
We've explored these risks in three recent articles:
🔐 Cybersecurity Burnout: The Human Error Risk
https://www.cycubix.com/cybersecurity-insights/cybersecurity-burnout-human-error-risk
🧠 The Psychology of Social Engineering
https://www.cycubix.com/cybersecurity-insights/social-engineering-psychology-cialdini
🎣 Why People Fall for Phishing
https://www.cycubix.com/cybersecurity-insights/why-people-fall-for-phishing-psychological-triggers
The lesson? Cybersecurity isn't just about technology. It's about understanding human behaviour and putting the right safeguards in place.
At Cycubix, we help organisations identify risks and strengthen their security defences. Get in touch to discuss how we can support your business.