Hook, Line, & Sinker - Addressing the Human Risk of Phishing and How to Avoid the Bait

on YouTube ↗41m

" summary

Claims that 3.4 billion malicious emails are sent per day and a data breach occurs about every 39 seconds, with business email compromise up 1700% and 74% of breaches involving human action. Demonstrations show AI generating convincing spearphish and fake sites, a QR-code swap that redirects to LinkedIn, and a staged “cyber the bear” awareness campaign plus recurring phishing simulations that increase reporting. Practical defenses are verify out of band, use tools like urlscan.io and any.run to inspect links/files, require multi-person approvals for finance, and reward reporting rather than punish failures.

AI-written summary · about

" chapters (21)

1. 0:00Introduction and opening joke
2. 1:08Forest fires and phishing parallels
3. 3:17Introducing Cyber the Bear concept
4. 4:22Types of phishing attacks explained
5. 5:45AI's impact on phishing sophistication
6. 7:34QR code and smishing risks
7. 9:00Real-world phishing success stories
8. 11:58Why phishing keeps working
9. 15:05Can phishing ever be stopped?
10. 16:06Personal protection strategies
11. 18:58Red flags and verification methods
12. 23:56Out-of-band verification importance
13. 27:05Corporate policies and procedures
14. 29:31Technical controls and limitations
15. 31:20People as defense assets
16. 32:23Early security training benefits
17. 33:05Handling phishing simulation failures
18. 34:47Rewarding security awareness
19. 36:12Effective training and simulations
20. 39:00Tailoring training to diverse teams
21. 40:02Key takeaways and closing tips

" related talks

• 27mBlunting the Phisher's Spear: A Risk-Based Approach...Arun Vishwanath · Black Hat USA 2016
• 25mHacking the human mind: The rise of social engineering security threatHisham Qaddoumi, Jim Pagiamtzis · Big Data & AI Toronto 2021
• 55mHacking HumansStephen Haunts · NDC London 2017
• 41mHacking Humans : Social Engineering Techniques and How to Protect Against ThemStephen Haunts · NDC Sydney 2017
• 06mPhishing hurts everyone: Hackers don't target by sizeOren Falkowitz · Collision 2017
• 50mHacking Humans : Social Engineering Techniques and How to Protect Against ThemStephen Haunts · NDC Minnesota 2019
• 30mSecurity Starts With You: Social EngineeringTiberius Hefflin · PyCon AU 2016
• 44mHacking Humans: Social Engineering TechniquesStephen Haunts · Øredev 2019