why aren't all 9 resolved? a statement only gets an assessment when the public
record can support or contradict it. opinions and what-ifs never can, and 0 checkable
ones are still open, waiting for their date. predictions held up or didn't;
assertions are supported or contradicted. on every card:
▮▮▮▮▮ certainty ·
▮▮▮▮▮ debate potential. speakers are clickable
Opinion
Falkowitz: Training employees to spot phishing attacks does not work
“So I'm gonna train all of you to spot phishing. That's not gonna work, right”
Assertion Not checkable as stated
Falkowitz: Area 1 Security has captured the entire internet for security
“What we've been able to do is capture the entire Internet, right, in a way that maybe you would think Google or others do, right, and to do that for a very specific sort of security purpose.”
Assertion Not checkable as stated
Area 1 Data: Top spam filters miss 9 targeted phishing emails per million
“Our data shows that for every one million messages a company receives, nine of them are of a targeted and sophisticated nature that the best spam, Google spam, others are going to miss, right?”
Assertion Partly supported
Falkowitz: 97% of all cyberattacks begin with phishing
“97% of all attacks Begin with phishing.”
Assertion Partly supported
Ten phishing emails yield a 90 percent success probability within 90 seconds
“If you send just 10 messages to a company, there's a 90% success rate that one of those users is going to click, and it takes less than 92nd, is this videotape, by the way? It takes, and it takes less than 90 seconds, right, for that to happen.”
Assertion Partly supported
Falkowitz: Companies take a year to discover cyberattacks after phishing starts
“These companies are only learning about these attacks a year after this initial phishing starts, right?”
Insight
Falkowitz: Cyberattacks operate as long campaigns, not instantaneous events
“A lot of my colleagues and senior executives from the government will often talk about cyber attacks as being at speed of light or network speed, right, is, is the example. But I think the reality is when you look at the data and from what we observe that, tha…”
Insight
Falkowitz: Cyber threat actors display predictable human patterns in data
“Cyber actors are no different than you and me, right? Which means that they open themselves up to a variety of predictable human patterns that can be observed in data that's very different from the way the security industry handles them today, right?”
Assertion Contradicted
Falkowitz: Verizon report shows 50% phishing success by third message
“Verizon yearly does a breach, a report on all the breaches that they responded to, and they found that by the third message that gets sent, 50% of the success rate is, is already achieved, right?”