Security controls are built for the threat that existed when they were designed. DMARC was built for spoofed domains. Multi-factor authentication was built for stolen passwords. Callback verification was built for calls genuinely placed by the person whose name appeared on the caller ID. None of them were built for a world where the voice … Continue reading Why AI Deepfakes Have Rendered Traditional BEC Defenses Obsolete And What CISOs Must Do Now