Cybercriminals exploit human nature with 7 social engineering tactics: phishing, spear phishing, pretexting, quid pro quo, baiting, tailgating, and watering hole attacks—each designed to trick employees into exposing sensitive data.