I'm on vacation now. Why, you might ask, am I writing a blog post when I should be on a beach somewhere? That, my friends, is the magic of pre-posting...

Me telling you that I'm on vacation could be used maliciously. How? Sometimes the most mundane bits of information can provide an attacker with a great opportunity.

I have actually used vacation scheduling to my advantage in past social engineering engagements. Consider this: " I am filling in for [insert name here] while they are on vacation but I can't get access to their files in the HR folder. Can you help me out?" That exact line worked like a charm. Surprised? You shouldn't be. Anything that gives you personal insight into a target can give you the edge and might get you inside their network.

Be vigilant!

Now, back to my piña colada. See you in a couple of weeks...