Скачать или смотреть Episode 84 -- Stopping Social Engineered Vishing Attacks Before They Start

In this eye-opening episode, Dr. Dave Chatterjee speaks with Richard Quattrocchi, Vice President of Digital Transformation at Mutare Inc., to expose one of the most overlooked cybersecurity vulnerabilities: voice-based social engineering (vishing). With nearly 80% of fraud and ransomware incidents tracing back to social engineering—and 1 in 4 beginning with a phone call—voice channels have become a prime target for attackers armed with AI, spoofing tools, and deepfake audio.

Richard shares his personal journey, including a family scam incident that shaped his mission, and breaks down why enterprises continue to overlook their phone systems due to outdated assumptions and organizational silos. The conversation covers the MGM breach, the psychology behind voice-based deception, and how attackers are scaling operations through global call-center-style fraud groups.

Dr. Chatterjee and Richard explore a layered defense strategy that integrates people, processes, and technology—highlighting Mutare’s metadata-driven voice traffic filtering that blocks malicious calls before they reach your users. This episode provides practical, actionable guidance for both enterprises and individuals on how to protect voice channels in an era of AI-powered vishing and deepfakes.

🔑 Episode Highlights

Why voice is the “blind spot” in enterprise security

MGM vishing attack breakdown and lessons learned

AI and deepfakes amplifying social engineering risks

Metadata-driven call filtering and CAPTCHAs for suspicious calls

People-process-technology layered defense model

Protecting seniors and vulnerable populations from scams

Cross-functional collaboration across security, IT, telecom, and leadership

SEC expectations for reasonable cybersecurity measures

🛡️ Actionable Takeaways

Treat the voice channel as a critical threat vector

Break down silos between telecom, IT, and security teams

Use call filtering, call CAPTCHAs, and layered defenses

Educate users—but reinforce training with technology

For individuals: use call-blocking apps, avoid unknown callers, verify identities

Align voice-security strategy with regulatory expectations

https://www.cybersecurityreadinesspod...