I'm going to live-tweet my observations about the 2016 Verizon DBIR as I read it. Judging by past years, it won't be pretty.
-
Do we not understand that counting vulnerabilities without context is useless? Verizon organized their data into attack patterns, c'mon.
Phishing education continues to be a mostly worthless pursuit. 30% of all emails opened, median time to click ~4m.pic.twitter.com/0mXYqHSFrg
-
-
Here's the "value add" of phishing education if you want to call it that.pic.twitter.com/m07KHAo5qu
-
I can never understand how Verizon bundles C2 in this dataset. This makes no sense!pic.twitter.com/Vw5PnCavgq
- 27 more replies
New conversation -
-
-
@dguido "Phishing messages opened" is a useless metric. A perfectly crafted message will hit 100%. Proper defenses must reside elsewhere. -
@dguido For classic phishing: how effective are password managers? How effective is it to teach people how and when to read the URL bar? - 2 more replies
New conversation -
-
-
@dguido I think the thing to look at here is how the education is being designed and executed..In my experience a lot of poor training..Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@dguido@matthew_d_green Solution: Deliver phishing education via phishing emails.Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
@dguido@matthew_d_green the temptation of a discounted LED TV is more than the consequence of loss by not clicking the link :-)Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.