Cognitive biases are predictable patterns in human thinking and decision making that can influence how people respond to situations. Social engineering attacks exploit these biases in order to manipulate victims into revealing information or performing actions that compromise security.
Biases such as urgency, authority, trust, and fear are commonly used throughout phishing and manipulation-based attacks. Understanding how these psychological techniques work is an important step towards recognising suspicious behaviour and improving cybersecurity awareness.