In this session, we will discuss the importance of treating people as a heterogeneous factor from a scientific perspective: how cybercriminals exploit psychological vulnerabilities to increase the effectiveness of their social engineering attacks, and how context, pressure, fatigue, stress, or cognitive load can contribute to a security incident.