Social engineering attacks manipulate human psychology rather than exploiting technical vulnerabilities.

Social engineering (phishing, pretexting, baiting) exploits human trust, curiosity, or fear to gain access or information. Often more effective than technical exploits. Defense: security awareness training, verification protocols, and least-privilege access. Critical for holistic cybersecurity understanding.