Join our Webinar May 14th @ 12:00 PM EST: Here

If you read the Verizon DBIR Report for 2024, it was a great read. It highlights a rise in exploiting vulnerabilities attributed to MOVEit and seeing a big uptick in ransomware attacks because of this exploit. But, if you dug deeper in the report there were some other great nuggets. Extortion is on the rise as well, along with Social Engineering.. AI is overhyped… But, Deepfake is a concern along with pretexting. But our favorite line from the DBIR Report is this: “This year, we have tweaked our human element metric a bit so its impact and action opportunities are clearer. You see, when DBIR authors (and the whole industry in general) would discuss this metric, it would be alongside an opportunity gap for security training and awareness. It is not perfect, but if you had a clear investment path that could potentially improve the outcomes of more than two-thirds of potential breaches, you might at least sit down and listen.”

This is probably cliché at this point, but we’re believers that the first line of defense for any organization isn’t the castrametation69 of their systems but the education of their key staff, including end users.70 Fortunately, this isn’t simply us standing on our “user-awareness” soapbox. We have both figures and hard numbers to help quantify our stance.

User Awareness training works… and the DBIR report backs this up with hard data… We could not agree more with the statement that educating your employees is one of the best investments you can make. It’s effective.

Our approach at Breacher.ai is unique, we perform deepfake simulations against a user base…But, only your key employees that are responsible for controls. This tests an organizations vulnerability and controls against Social Engineering and Deepfake. In parallel, we spot educate users that fail our simulations and tests, Security Awareness training is a huge component in defending against Deepfake and Social Engineering. We measure both.

Vulnerability assessments and user awareness training are both a Cyberinsurance requirement as well. And our deliverable is a report that highlights an organizations vulnerability to Deepfake along with proof that we educated users.

There is an over-emphasis on tech based solutions for Deepfake while the basics like user awareness are being overlooked. And this is one of the leading factors of a breach…

Join our Webinar May 14th and we’ll show you how we do it.