Falkowitz: 97% of all cyberattacks begin with phishing
Oren Falkowitz · Oren Falkowitz, Area 1 Security // The Future of Cybersecurity (Hosted by FirstMark Capital) · Oct 21, 2015 · at 5:15
Oren Falkowitz, founder and CEO of Area 1 Security, presents data on modern cybersecurity vulnerabilities at Data Driven NYC.
0:00 / 0:03exact quote · 3.4s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“97% of all attacks Begin with phishing.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Oren Falkowitz
Falkowitz: Training employees to spot phishing attacks does not work
“So I'm gonna train all of you to spot phishing. That's not gonna work, right”
Falkowitz: Area 1 Security has captured the entire internet for security
“What we've been able to do is capture the entire Internet, right, in a way that maybe you would think Google or others do, right, and to do that for a very specific sort of security purpose.”
Area 1 Data: Top spam filters miss 9 targeted phishing emails per million
“Our data shows that for every one million messages a company receives, nine of them are of a targeted and sophisticated nature that the best spam, Google spam, others are going to miss, right?”
Ten phishing emails yield a 90 percent success probability within 90 seconds
“If you send just 10 messages to a company, there's a 90% success rate that one of those users is going to click, and it takes less than 92nd, is this videotape, by the way? It takes, and it takes less than 90 seconds, right, for that to happen.”
Falkowitz: Companies take a year to discover cyberattacks after phishing starts
“These companies are only learning about these attacks a year after this initial phishing starts, right?”
Falkowitz: Cyberattacks operate as long campaigns, not instantaneous events
“A lot of my colleagues and senior executives from the government will often talk about cyber attacks as being at speed of light or network speed, right, is, is the example. But I think the reality is when you look at the data and from what we observe that, tha…”