It is well known that humans are the weakest link in Information Security. So why is it that this area of security receives such little attention? Attackers have realized that they don't have to spend vast amounts of time or money developing or purchasing 0-days in order to successfully breach an organization. Yet, blue teams continue to invest their efforts in expensive security appliances that often do very little in protecting against these type of attacks, or they just ignore the threat all together. This talk will explore the latest social engineering techniques that are currently being used by criminals, while also going into some of the ways to defend against them.