// Comparison

Cyberattaques vs The Art of Deception: Which Should You Read?

Two cybersecurity books on Narrative, compared honestly: who each is for, what each does best, and which to read first.

Beginner
4/52022
Cyberattaques

Les dessous d'une menace mondiale

Gérôme Billois, Nicolas Cougot

A clear, journalistic decoding of the cyberattack ecosystem — ransomware gangs, state actors, and the economics and geopolitics behind the headlines — by one of France's best-known cyber experts.

Beginner
4/52002
The Art of Deception

Controlling the Human Element of Security

Kevin Mitnick, William L. Simon

Kevin Mitnick and William Simon's case-study collection of social-engineering attacks: PBX scams, helpdesk impersonation, dumpster-diving, the casual lies that sound true. The technology dates the book; the human side is timeless.

Read this if

General readers, executives and students who want to understand how modern cyberattacks actually work and why they matter, with no technical prerequisites. Won the FIC Grand Public prize in 2023.
Anyone in red team, awareness training, fraud, or insider-threat work who wants the best printed library of pretext archetypes. Mitnick's call scripts are still the gold standard for understanding how a competent social engineer establishes credibility in 30 seconds.

Skip this if

Practitioners after technical depth or hands-on method; this is high-level explanation and storytelling, not a how-to.
Readers wanting current SE tradecraft on phishing, deepfakes, voice cloning, MFA fatigue, or modern OSINT-driven targeting. Treat the technical envelope as a museum piece; only the human core generalizes.

Key takeaways

  • The most accessible French overview of the modern threat ecosystem — ransomware, state actors, the underground economy.
  • Billois is a working consultant, so the examples are grounded in real incident response, not theory.
  • A great gateway book for non-technical decision-makers who need to grasp the stakes.
  • Most successful pretexts are not lies; they are partial truths weighted toward what the target already wants to do.
  • Helpdesks, third-party vendors, and after-hours staff are still the structural weak points the book identifies — twenty years later, with new technology stacks but the same failure modes.
  • Awareness training built around Mitnick's archetypes outperforms generic phishing-click-rate metrics; the book is the textbook for that approach.

How they compare

Cyberattaques and The Art of Deception are both rated 4/5 in our catalog. Pick by topic preference and reading style rather than by rating.

Both books target beginner-level readers, so the choice is about topic, not difficulty.

Cyberattaques and The Art of Deception both cover Narrative, Foundations, so reading them in sequence reinforces the same material from different angles.

Keep reading

Related topics