The Ledger
Every statement that passed quotation and attribution checks. Mix any filter with any other: certainty 1/5, debate potential 5/5, or both at once.
why aren't all 15 resolved? a statement only gets an assessment when the public record can support or contradict it. opinions and what-ifs never can, and 1 checkable ones are still open, waiting for their date. predictions held up or didn't; assertions are supported or contradicted. on every card: ▮▮▮▮▮ certainty · ▮▮▮▮▮ debate potential. speakers are clickable
Long: AI cyberattacks will disable critical infrastructure within two years
“I think what I'm really worried about is that when you're going to see this actually transition to people being actively hurt you know, hospitals being taken down, energy systems taken offline, other things like that. Obviously we've had cases of that already …”
Long: Everyone will experience a deepfake attack within a year
“And I think that's gonna end up being the, you know, the answer that everyone's gonna experience it in the next year or so.”
Long: AI will enable cybercriminals to deploy autonomous attack agents at scale
“Now with AI, they can lever themselves up and they can make, you know, infinite numbers of themselves as agents to go out and do these types of attacks autonomously. And it's going to be very, very profitable for them. So they're going to have lots of money to…”
Long: US recorded over 100,000 deepfake attacks in 2024
“Where in the United States in 20, 24, we saw over a 100,000 deep fake attacks.”
Long: Deepfake Russian official targeted the Senate Foreign Relations Chairman
“Example that I brought up in a recent post that I feel like was just kind of overlooked. Maybe you covered at some point. I don't know, but overlooked in the broader media was when someone used to deep fake in order to call up the chairman of the foreign relat…”
Long: Security training is ineffective unless it is jarring to users
“One, I think training should be personalized to you and it should really engage and hopefully be jarring to you. If it's not jarring in some way, then it's not really working.”
Long: A legacy security training company unwittingly hired a North Korean operative
“One of the legacy training companies actually came out a few months ago and said that they actually had someone from North Korea that I think they may have employed or that got into their systems or something.”
Long: Nearly 90% of cyberattacks still originate through human vectors
“The reality is that almost 90% of attacks still come through people.”
Long: Social engineering attacks rose over 4x since ChatGPT launch
“So since ChatGPT came out a little over two years ago, we've seen over a four X increase in social engineering attacks.”
Long: New AI models enable scalable attacks across voice, SMS, and video
“So, you know, whether that's voice or SMS or video or chats all of those can now be done at scale where, you know, previously I think it would have been cost prohibitive.”
Long: Modern AI models only need a voicemail greeting to replicate voices
“Because now with these models, that's all they need in order to do the replication of your voice.”
Long: Avoiding unknown callers to prevent voice cloning will become standard
“And that sounds like a crazy comment now, but I'm betting pretty strong that in five years this will be a very normal thing people think about.”
Long: 90% of legacy cybersecurity training content is irrelevant
“90% of the content's not relevant.”
Long: Bad security training signals that company security is unimportant
“When the training is kind of a joke at the company, I think it also sends a signal to all of the employees that the company's security posture is also not very important.”
Long: Protective AI will beat malicious attack agents over next decade
“So yes, I do think that you're going to see a lot of that AI being used for very good to protect. And you know, we're going to be fighting each other over the next decade plus, and I'm confident that we're going to went over it”