Stephanie Carruthers

Chief People Hacker for IBM X-Force Red

Stephanie "Snow" Carruthers is the Chief People Hacker for X-Force Red, an autonomous team of veteran hackers within IBM Security. At DEF CON 22 she won a black badge for the Social Engineering Capture the Flag (SECTF) and was on the winning team for SAINTCON'S Vault Physical Security challenge, which won the team a black badge. Stephanie has performed a variety of Red Team and Social Engineering assessments for clients ranging from start-ups, Fortune 100 companies, to government agencies.

Offensive Security October 24, 2023

AI vs. human deceit: Unravelling the new age of phishing tactics

7 min read - Attackers seem to innovate nearly as fast as technology develops. Day by day, both technology and threats surge forward. Now, as we enter the AI era, machines not only mimic human behavior but also permeate nearly every facet of our…

Advanced Threats July 17, 2020

#TwitterHack: Power, Privilege and Pandemic

4 min read - On Wednesday, July 15, the Twitterverse was ablaze with what Twitter itself has described as a “coordinated social engineering attack” that was launched at around 4pm ET. The outcome of this breach was compromised Twitter accounts of many well-known people…

Advanced Threats April 23, 2020

New Study Shows Consumers Could Be Vulnerable to COVID-19 Spam

5 min read - Since March 11, IBM X-Force has observed a more than 6,000 percent increase in COVID-19 spam, with lures ranging the full gamut of challenges and concerns facing individuals.

Threat Intelligence March 3, 2020

State of the Phish: IBM X-Force Reveals Current Phishing Attack Trends

6 min read - Phishing has long been an infection vector of choice for threat actors, and for good reason — it is relatively easy, inexpensive and consistently successful.

CISO May 28, 2019

Interns and Social Media: A Goldmine for Hackers

7 min read - A social media post from one of a company's interns was all this people hacker needed to enter a secure area with a counterfeit employee badge.

Security Services January 28, 2019

Social Engineering Testing: Why Getting Hacked Is a Security Advantage

4 min read - Social engineering and security awareness training exercises can help business leaders uncover gaps in their incident response plans and identify poor security hygiene among employees.

Failed to load data

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.

Subscribe today

Analysis and insights from hundreds of the brightest minds in the cybersecurity industry to help you prove compliance, grow business and stop threats.

Cybersecurity News By Topic By Industry Exclusive Series X-Force Podcast Events Contact About Us

Security Intelligence

{{title}}

{{title}}

{{title}}

Topics

Stephanie Carruthers

AI vs. human deceit: Unravelling the new age of phishing tactics

#TwitterHack: Power, Privilege and Pandemic

New Study Shows Consumers Could Be Vulnerable to COVID-19 Spam

State of the Phish: IBM X-Force Reveals Current Phishing Attack Trends

Interns and Social Media: A Goldmine for Hackers

Social Engineering Testing: Why Getting Hacked Is a Security Advantage

{{{title}}}

Topic updates