The Two-Channel Rule

Key Takeaways Out-of-band verification means confirming a request on a second channel the attacker doesn’t control. Detection is dead. Arup’s employee was suspicious, asked for a video call to verify, and every face on the call was a deepfake. About $25.6 million gone. Ferrari survived on luck: one executive, one unanswerable question. Luck doesn’t scale. … Read more