With Social Engineering ( SE ) skills, unsuspecting criminals can pose as familiar individuals with the information they already know about you and trick you to allow them in. Most attacks these days use social engineering as their entry point.
For example, instead of trying to find a software vulnerability, a social engineer might call an employee and pose as an IT support person, trying to trick the employee into divulging his or her password. Alternatively, they can clone the organizations web applications and try to lure remote workers to login through the fake websites, thereby stealing their authentication credentials.
The strongest security architecture can easily be broken by Social Engineering techniques, simple as it may be, it creates a major security weakness if exploited.
When software or application has vulnerability issues, it is usually patched with updates to secure them but there is no patch to human stupidity, recklessness or irresponsibility.
In addition to strong security architecture, Organizations need to also educate their employee on the trending security breaches and cyber threats associated with their works and to direct every IT related inquiries to the IT department.