Whitley Penn Talks: A Professional Hacker Reveals How Easy It Is to Compromise Businesses
Whitley Penn Talks: A Professional Hacker Reveals How Easy It Is to Compromise Businesses
10/15/2026
What if your company’s most dangerous cyber threat isn’t phishing emails, but a man with an official-looking badge walking through the front door? What if your entire bank account is emptied, not by a bot, but by a phone call from a real live human?
This Cybersecurity Awareness Month, get ready for one of the most eye-opening episodes we’ve ever recorded.
Buffie Campbell and Kendall Neukomm sit down with Donovan Farrow, Founder and CEO of Alias Cybersecurity, to explore how attackers exploit human behavior to gain access to organizations.
Donovan shares real stories from his career, including how a simple badge helped him gain access to secure areas, how he got employees to hand over credentials, MFA codes, and passwords, and how social engineering continues to outperform technical attacks. The conversation also explores AI-powered scams, deepfakes, phishing, invoice fraud, critical infrastructure threats, and the growing cybersecurity risks facing businesses of all sizes.
Whether you’re in energy, accounting, finance, technology, or business leadership, this episode is a must listen for those looking to keep their information (and companies) safe.
Listen to this episode on YouTube, Spotify or Apple Podcasts.
Featuring:
Donovan Farrow
Founder & CEO, Alias Cybersecurity
10/15/2026
What if your company’s most dangerous cyber threat isn’t phishing emails, but a man with an official-looking badge walking through the front door? What if your entire bank account is emptied, not by a bot, but by a phone call from a real live human?
This Cybersecurity Awareness Month, get ready for one of the most eye-opening episodes we’ve ever recorded.
Buffie Campbell and Kendall Neukomm sit down with Donovan Farrow, Founder and CEO of Alias Cybersecurity, to explore how attackers exploit human behavior to gain access to organizations.
Donovan shares real stories from his career, including how a simple badge helped him gain access to secure areas, how he got employees to hand over credentials, MFA codes, and passwords, and how social engineering continues to outperform technical attacks. The conversation also explores AI-powered scams, deepfakes, phishing, invoice fraud, critical infrastructure threats, and the growing cybersecurity risks facing businesses of all sizes.
Whether you’re in energy, accounting, finance, technology, or business leadership, this episode is a must listen for those looking to keep their information (and companies) safe.
Listen to this episode on YouTube, Spotify or Apple Podcasts.
Featuring:
Takes from the Talk
How do hackers gain access to companies without breaking through technical security?
Many successful attacks start with people, not technology. Attackers often use social engineering techniques such as impersonating IT staff, creating a sense of urgency, leveraging authority, or building trust to convince employees to reveal information, unlock systems, or bypass established procedures. Human behavior is often the easiest path into an organization.
What is social engineering in cybersecurity?
Social engineering is the practice of manipulating people into taking actions that benefit an attacker. A hacker may pretend to be an IT professional, using information gathered online to sound legitimate, and exploit natural human tendencies such as helpfulness, curiosity, trust, and the desire to solve problems quickly. Attackers often target people before they target technology.
Can multi-factor authentication (MFA) still fail?
Yes. While multi-factor authentication can work correctly from a technical standpoint, attackers may still succeed if users are convinced to provide authentication codes to someone they believe is legitimate.
Why are small and midsize businesses attractive targets for cybercriminals?
Attackers often look for the easiest opportunities rather than the biggest companies. Smaller organizations may have fewer cybersecurity resources, less employee training, or fewer safeguards in place. As a result, businesses that view themselves as “too small to be targeted” may actually become attractive targets because attackers see them as easier to compromise.
How is artificial intelligence changing cybersecurity threats?
AI can help attackers create more convincing phishing emails, improve communication across different languages, and produce realistic deepfakes. Organizations must become more cautious because cyber threats increasingly look and sound authentic.
What cybersecurity risks are energy and oilfield service companies facing?
Their are growing concerns around cyber threats impacting critical infrastructure, including energy operations, service providers, and vendors, specifically compromised Microsoft 365 accounts, invoice fraud, payment redirection schemes, and attacks on third-party service companies. While large energy companies may have significant security resources, smaller vendors and service providers can become vulnerable entry points for attackers.