[sailfast]

Second this, and also recommend The Art of Deception which focuses on a combination of social engineering attacks with technology vectors. Not a novel as it's really about actual security, but still worth a note.