BEC was already the costliest category using plain text and patience. Synthesis removed the last verification step people actually used.
AI-referencing complaints are ~4% of reported losses. The other 96% is the story — and the AI share is undercounted by construction.
The unwritten backstop was that someone would ring the executive and recognise them. The seniority that makes impersonation work is what makes the voice public.
The proposition that exposure produces harm is almost certainly true and is not demonstrated. Saying so is the difference between reporting and advocacy.
Three hundred files describe organisations losing data. This is the other end — and there is no bridge between them.
Domains are replaced in days. Escrow is the mechanism that lets parties who would defraud each other trade at all.
A university discovering redirected payroll has suffered an incident. An employee who was not paid has suffered a loss on a specific date.
No control that checks sender authenticity helps, because the sender was authentic. What was false was the person operating it.
Mandatory data is accurate about what it captures and silent about everything outside its trigger.
If this corpus’s assumptions came from markets with a desktop phase, they may describe the minority condition.
$1.447 billion in one theft — around 7% of a full year of all reported US cyber-fraud losses. A state revenue event, not a crime statistic.
Invoice records describe who supplies whom, on what terms — useful to a competitor and to a fraudster.