What is the role of social engineering in cyber attacks, and how can organizations defend against it?