Human Attack Surface: Simulating, Detecting, and Defending Identity & AI-Driven Threats

Online, Available in English and Arabic

Topics:

• Exploiting the Human Attack Surface
• Modern phishing (including AI-generated phishing campaigns) 
• Credential harvesting and session hijacking 
• Insider threats and privilege misuse 
• Social engineering attack patterns 
• Identity attack techniques 
• Lab 1: Phishing simulation and payload analysis
• Lab 2: Credential capture and session replay scenario
• Detection, Response & AI Risk
• Identity protection and Zero Trust fundamentals 
• Behavioural monitoring and anomaly detection 
• Incident response for compromised users 
• AI-driven risks: Prompt injection, Data leakage via LLMs, Shadow AI usage 
• Lab 3: Detect compromised identity scenario
• Lab 4: AI misuse simulation and mitigation

Overview

The human layer is the most exploited attack surface in modern enterprises, now amplified by AI-driven phishing, credential abuse, and data leakage.

This hands-on training enables participants to simulate real-world user-targeted attacks, analyse identity compromise scenarios, and implement detection and response mechanisms. The course also introduces emerging risks such as prompt injection and shadow AI usage, providing practical techniques to defend against them.

By the end of this course, the participant will be able to: 

• Understand how attackers exploit the human layer. 
• Simulate and analyse identity-based attacks. 
• Implement detection and response techniques. 
• Apply Zero Trust principles to workforce security. 
• Identify and mitigate AI-driven risks.