This talk will start by covering techniques recently used to break into multiple banks and an airlines’ system operations center. Highlights include convincing a helpdesk technician to bypass their multi-factor authentication solution and a detailed review of what would have prevented these attacks from being successful.