From cybersecurity and big data to cloud computing, IT Brew covers the latest trends shaping business tech in our 4x weekly newsletter, virtual events with industry experts, and digital guides.

IT Brew

Tom McKay

itbrew.com

Graphic of gravestones in descending height order

Scam obituary sites draw enterprise traffic, research finds

Obituary sites that currently scam users into installing push notifications and pop-ups could be a vehicle for malware.

Amanda Florian

Threat actors in China becoming ‘more brazen,’ NSA says 

Dave Luber of the NSA told IT Brew new incidents tied to Volt Typhoon are unfolding every day based on “industry and incident response reporting.”

Billy Hurley

HSB adds cyber protections to automotive coverage

The insurance provider sees the car a lot like a computer—both can be hacked.

A shield with a checkmark inside icon denoting cybersecurity

Cybersecurity

Eoin Higgins

The video game industry is the biggest entertainment sector in the world. For IT workers in video games, whether developers, security professionals, or others, that success means challenges and hard work.

Software development is going through changes, Chris Anley, a chief scientist with research firm NCC Group, told IT Brew, and the gaming industry is no different. Supply-chain issues plague software, and security is always top of mind. Meanwhile, a demanding user base wants top performance and seamless experiences.

“If you’re writing games, you’re trying to get the most performance out of the hardware you possibly can, you’re trying to provide the richest experience for your users,” Anley said.

The user base is demanding. Fastly CTO Artur Bergman noted that’s a part of the incentives of the industry.

“Gamers are more technical and more verbal when things don’t work than most people,” Bergman said. “The patience for slow downloads and for any kind of errors is much lower.”

Slower download rates—a complaint his company encounters as part of providing software services for game developers—are of particular concern. People aren’t willing to wait around when downloading to play, and it’s a challenge that must be anticipated and dealt with.

And those traffic demands can be spiky, correlating to releases: “It behaves much more like a sports live event than it does normal traffic,” Bergman said. In September, 

, including Nintendo, PlayStation, Xbox, and Steam, due to demand.

Games are getting larger, especially when it comes to blockbusters, also known as AAA games. In addition to being heavy on the download side, they are particularly expensive to develop—2020’s 

 to make. The cost and time to produce new IP presents a risk as well; if a game isn’t financially successful, then the production is a sunk cost. Kevin Janzen, CEO of Globant’s gaming and ed. tech AI studio, told IT Brew that all adds to the pressure for staff, especially in the post-Covid sales landscape.

“There’s been this situation with so many companies having to rethink their plans, and so many others being acquired by larger studios that can’t afford the risk of making a game that doesn’t perform according to expectations, and that’s still not meaning bankruptcy,” Janzen said. “That has caused a state of uncertainty for the professional IT person.”

Making production more cost-effective will help to reduce studio dependency on just one project, Janzen said. Consumers don’t buy as many new games, meaning that staying profitable often requires delivering new experiences and good gameplay within existing properties. In order to stay viable and profitable—and maybe to develop the next 

—companies often turn to overworking their employees to keep up with competitors, often accelerating the demand during “crunch time” before a game 

. Janzen doesn’t feel that’s necessary, though.

“It’s not necessarily working harder or more hours, it’s trying to work more efficiently and trying to think, ‘How can we make sure that we have a good game that satisfies the expectation of consumers without necessarily increasing the expense of game development?’” Janzen said, adding, “It means to think differently and try to understand, how can we offset that risk?”

A retro video game controller photographed in front of an orange background

Video game industry IT full of challenges, user base concerns

Game CTO tells IT Brew the industry needs to “think differently.”

Brianna Monsanto

Have you ever been tempted to spend less than $1,000 on satellite equipment—just so you can show how much sensitive data can be easily accessed?

Computer scientists from the University of California, San Diego, and the University of Maryland answered “yes” to that question. In a 

 published Oct. 13, they wrote that they can use satellites to access large amounts of sensitive and unencrypted traffic from a variety of sectors, including the telecommunication, retail, and even the military.

The researchers focused their study on geostationary (GEO) satellites, which orbit the Earth’s equator, receiving and amplifying signals from the ground. Hardware used to conduct the study included a Ku-Band satellite dish, a low-noise block downconverter to amplify weak signals, and a dish motor to enable automated movement for tracking purposes, among other materials. In total, the equipment ran the researchers just under $700, or roughly what you’d pay to rent a one-bedroom apartment in Wichita, Kansas.

With their makeshift setup, the researchers set up base on the roof of a university building in San Diego, where they performed a “broad scan of IP traffic on 39 GEO satellites

From these scans, researchers said they saw “unencrypted cellular backhaul traffic from multiple telecommunications providers,” including KPU Telecommunications and AT&T Mexico. While listening to a nine-hour recording of raw data streams, they added, they identified three satellite beams that carried unencrypted T-Mobile traffic, and observed close to 3,000 user phone numbers from metadata. Neither KPU, AT&T Mexico, nor T-Mobile responded to IT Brew’s request for comment on the findings.

Telecommunications providers weren’t the only ones with exposed traffic. Researchers also noted unencrypted traffic from US-owned sea vessels and organizations within the Mexican government.

On the corporation side, researchers identified unencrypted Walmart Mexico internal system traffic, which contained private data, including encrypted internal corporate emails, inventory records, and logins to the company’s inventory management system. Walmart Mexico did not respond to IT Brew’s request for comment by the time of publication.

In total, 50% of GEO links observed in the study contained cleartext IP traffic.

Researchers reached out to affected parties to disclose their findings from the study, and several remedies have been deployed to address vulnerabilities. Based on their findings, they concluded that there is a “clear mismatch” between satellite customers’s expectations of data security and the security that is actually in place.

“Cell phone traffic is carefully encrypted at the radio layer between phone and tower to protect it against local eavesdroppers,” the researchers wrote. “It is shocking to discover that these private conversations were then broadcast to large portions of the continent, and that these security issues were not limited to isolated mistakes.”

The researchers say there’s no way to determine if someone has set up a dish to secretly listen to traffic. However, end users can use a VPN to encrypt network traffic they generate, as well as end-to-end encrypted apps for voice and messaging communications. Organizations should treat their satellite communication links like “unsecured and public wireless networks,” according to the researchers, who also suggest companies should also practice strong encryption.

“Encryption should be used at every layer as defense-in-depth protection against individual failures,” the researchers said. “Treat encryption as mandatory, not an add‑on.”

It takes less than $1k to access unencrypted satellite data: study

Researchers from the University of California, San Diego, and the University of Maryland say 50% of GEO links observed in their study had cleartext IP traffic.

If you hear techno bumping from Alex Lisle’s living room, it’s not a rave; he’s probably coding a graphics engine.

Lisle, currently CTO at deepfake detector Reality Defender, still finds programming calming, even when the background beats are loud. Decades before he joined the NY-based cybersecurity platform this past July, Lisle created video games, supporting consoles like the Sega Dreamcast and Sony PlayStation. He’s also worked for cybersecurity firms.

A security pro with gaming expertise is a rare combination, according to Lisle; gamers make things, and cyberteams tend to break things.

“Generally, really great cybersecurity guys don’t actually make great programmers…because they’re usually very good at finding holes in things,” he said.

Lisle spoke with IT Brew about his experience moving between hacker and programmer roles, and how the dual professional worlds have given him a unique perspective to help in his latest effort: spotting deepfakes.

Lisle began his professional game-development career in 1999. As a junior system administrator at Sega Europe, Lisle—a teen at the time, and about 10 years younger than his peers, he said—was tasked with creating and securing the internet service provider network built specifically for the Sega Dreamcast console. Years before taking the gig, young Lisle had taken an interest in offensive hacking, using tools like a network sniffer to spot unencrypted traffic—and unencrypted login credentials. At Sega, he was sniffing out hackers from the other side of the firewall.

“People wanted to hack Sega all the time, so it was kind of fun stopping people from hacking,” Lisle said.

The job reinvigorated his passion for programming, Lisle told us; he recalled beginning his lifelong computer journey by manually typing code into an Amstrad CPC, an 8-bit home computer. The final result, according to Lisle: a buggy fencing game.

After a year at Sega, Lisle went back to school to hone his programming skills and then became a research developer at Durham University, where he designed molecular-screening software.

Following the on-campus work, Lisle got back into gaming, spending stints at Sony and Venom Games.

His love for coding led him back to cybersecurity. In 2008, he joined Fortify Security as an engineer and helped to develop the company’s static analysis tool for finding code bugs. Other security roles followed over the years. Now, as Reality Defender’s CTO, he spends his time researching new deepfake attacks and making sure the company’s technology is prepared for them—more of that Sega-era, defensive-security fun, perhaps.

What makes a gaming pro a good security pro? 

Whether you’re a cyberattacker or a computer-game programmer, you’re pushing limits, according to Lisle. During his time programming video games, Lisle learned how to get the most out of limited hardware and graphics engines. “You can’t say to someone, ‘Hey, get a bigger GPU,’” he told us, recalling a time a colleague created two separate graphic engines to “push more polygons through” the Playstation platform.

A limit-pushing adversary finds vulnerabilities in an unexpected part of an environment. Lisle recalled the 2013 breach of Target, which 

 began via a compromise of an HVAC company.

“I mean, that’s lateral thinking,” he said, referring to a disruptive, creative, problem-solving approach.

What makes a gaming pro a good deepfake detector?

 found that listeners correctly spotted audio deepfakes 73% of the time. A James Cook study that same year revealed a 61% accuracy rate with 

; this reporter ended up with an 18/30 deepfake-minus.)

What Lisle has learned over the years, with deepfakes and with video games, is that a digital representation doesn’t have to be photorealistic to effectively deceive a human. We all have a programmer’s way of building an image in our minds, but not always breaking it down.

“When it comes to deepfakes, unless you’re really studying for it, your mind will fill in a bunch of the blanks,” Lisle said.

A portrait of Alex Lisle, CTO of Reality Defender.

Why a life in video games and cybersecurity helps with deepfake detection

Meet CTO, former hacker, and former video game programmer Alex Lisle

Avast! University employees are getting ambushed by pirate attacks, and not the kind that occur while sailing the seven seas.

Earlier this month, Microsoft Threat Intelligence 

 on a scam campaign targeting US university employees, where threat actors successfully divert salary payments from employee accounts to their own. The scheme has been dubbed a “payroll pirate” attack by the broader industry.

 Microsoft researchers referred to the threat actor behind the scheme by the alias Storm-2657. In the observed campaign, Storm-2657 gained access to employee accounts through adversary-in-the-middle phishing, a form of 

 malicious actors use to bypass multi-factor authentication (MFA).

Phishing emails used to lure victims targeted accounts at universities, according to the researchers. Some of these convincing phishing emails alluded that the receiver may have been exposed to a campus illness outbreak. Others focused on classroom misconduct reports. Phishing emails also featured Google Docs links, which are commonplace in academic settings.

After obtaining an MFA code, Storm-2657 compromised victims’s Microsoft Exchange Online accounts and gained access to their Workday profiles, then covered their tracks by enforcing automated instructions to delete “warning notifications” from the software platform. From there, the attacker redirected future employee salary payments to bank accounts of their own.

Storm-2657 used some successfully compromised emails to send out even more phishing emails. Microsoft said it observed 11 successfully compromised accounts at three universities that collectively sent phishing emails to 6,000 email accounts since March.

The threat actor focused on Workday profiles in the observed campaign, which took place in H1 2025. However, the researchers claim the same technique can be used to target other SaaS systems storing HR or banking information. Microsoft said the pirate payroll attacks don’t reflect any vulnerabilities in Workday’s platform and that the 

 company has already released guidance for consumers.

Payroll pirates aren’t the only type of criminals educational institutions are warding off. IT Brew 

 the growing problem of ghost students, malicious actors who pose as university and college students to reap financial aid and other student benefits.

Malicious actors continue to launch classic 

 found that schools, colleges, and universities experienced a 23% uptick in ransomware attacks YOY in H1 2025.

Microsoft recommends organizations protect themselves from payroll pirate attacks by ditching traditional credentials and embracing 

 workflows: “Microsoft recommends enforcing phishing-resistant MFA for privileged roles in Microsoft Entra ID to significantly reduce the risk of account compromise.”

A thief surrounded by cards on fishing hooks floating above a laptop.

‘Payroll pirate’ attackers are going after university employees

These attacks are when cybercriminals compromise employee Workday and other third-party accounts and divert salary payments to their own accounts. 

Caroline Nihill

With seemingly endless cybersecurity tools available to organizations, it can be difficult to determine what to invest in—whether tried and true tools or something newer like agentic AI. But with cybersecurity budgets in flux, experts say relying on agentic AI could prove a cost-efficient way to handle threats…with some caveats.

AI can help cybersecurity workflows with everything from natural language processing and data mining to predictive analytics and machine learning, 

Experts like Loreli Cadapan, VP of product management at software delivery solutions provider for enterprises company CloudBees, said cybersecurity applications using agentic AI can reduce friction throughout code production. While she acknowledged the approach isn’t directly reducing infrastructure spend, it reduces cost from a “developers’ toil perspective.”

“There’s a lot less context switching on the developer side, and that also allows them to spend more time on innovation, rather than the mundane task of triaging build failures…or triaging a security vulnerability,” Cadapan said.

Kara Sprague, CEO of HackerOne, said she believes it’s smart to employ agentic AI in a cybersecurity context, “because we have surpassed the point where humans can scale to the level needed for security.”

However, it’s important for IT professionals to ensure AI-supported cybersecurity has proper guardrails in place. “A lot of times, those humans are going through some sort of background check, some sort of verification, there’s organizational data and information sharing policies that that human has to comply with,” Sprague said. “We need to think about similar controls around the AI agents that we’re implementing.”

How do we solve a problem like no money? 

The Institute for Applied Network Security (IANS) 

 that in 2025 organizations have scaled back security budgets.The average annual security budget growth dropped to its lowest point in five years at 4%—compared to 2024’s growth level of 8%.

When funding levels drop, Vidya Shankaran, field CTO of emerging technologies at Commvault, says that a strong business case needs to be made for cybersecurity solutions.

“It’s not as straightforward as saying, my antivirus tool is called, it’s going to cost me XYZ, so I’m just going to go all guns blazing and invest in the cheapest product,” Shankaran said. “Because sometimes that may not [be] correct, probably it does not meet all the risk parameters that you’re looking to offset within your organization.”

Cadapan said that if an IT team isn’t focused on increasing efficiency in the project timeline, it gets more expensive to fix issues from a security and compliance perspective.

“With the rise of AI, more developers are actually producing code, leveraging AI…and many other tools out there that [are] available for developers today,” Cadapan said. “Where I’m seeing and hearing from customers, from developers out there, is the shift in mindset of, ‘How can we leverage AI to reduce this friction on the code review, on the testing, all the way down to the production perspective?’”

Cybersecurity pros can’t really check every single sensor or detecting tool every single day (or if they did, it would take too much time). Erin McFarlane, VP of operations at Fairmarkit, suggested that agentic AI can give an organization a guard who works around the clock.

“[AI] can really give you a best-practices view of whatever it is that you’re looking at from an agentic perspective,” McFarlane said. “So much of security tends to be reactive, and that’s always been the complaint, that we’re preparing for something after it happens rather than… for sensing various signals.”

In McFarlane’s opinion, AI should increase organization budgets because it presents new risks, even as it saves IT infrastructure from bad actors.

Sprague said that those who are looking to implement agentic AI into a cybersecurity stack on a budget should examine existing tools and ensure that the enterprise is taking advantage of the full set of capabilities already available.

“I would advocate for security leaders to be doing some amount of zero-based budgeting and really to…do an assessment of where are the biggest risks across my organization, and am I invested appropriately across my security tools and practices and solutions to mitigate those risks,” Sprague said.

Correction 10/16/2025: Vidya Shankaran's title has been updated.

Agentic AI could be the savior of cybersecurity budgets

“So much of security tends to be reactive, and that’s always been the complaint,” one expert says.

OpenAI is expecting to see more attackers use ChatGPT and other AI models to produce malicious code and tools, according to a new report. However, the company sees no evidence that attackers are using its AI models to produce novel offensive capabilities.

, OpenAI outlined several instances where it disrupted bad actors, including nation-state actors and criminal groups, who were attempting to use ChatGPT’s capabilities to produce malware or engage in other nefarious activities against what the company called “the democratic principles America has always stood for.”

“[Promoting democratic AI] includes preventing the use of AI tools by authoritarian regimes to amass power and control their citizens, or to threaten or coerce other states; as well as activities that may result in society-scale harms such as malicious cyber activity, organized crime and scams, and covert influence operations,” the report stated.

 to the White House Office of Science and Technology Policy’s AI Action Plan as evidence of the company’s commitment to building and maintaining “democratic AI.”

OpenAI did not respond to a request for comment in time for publication.

The company reportedly found individuals linked to People’s Republic of China (PRC) government entities using ChatGPT to help with “development, profiling, and bureaucratic functions.”

Specifically, some of those accounts were trying to use ChatGPT for large-scale monitoring activities, such as analyzing datasets gathered from social media platforms. OpenAI reported users asked the model to help design tools and generate promotional materials, but hadn’t put actual monitoring into practice.

“For example, we recently banned a user, possibly using a VPN to access our services from China, who was asking ChatGPT to help design promotional materials and project plans for a social media listening tool, purportedly for use by a government client,” the report said.

OpenAI described its disruption tactics as banning users who appeared to be linked to PRCe government entities and seemed to be using ChatGPT for “more bespoke” targeted profiling and online research. According to the report, the models only returned publicly available information instead of sensitive details when utilized by political actors.

In another case study, OpenAI pointed to a Russian-language malware tool developed through vibe coding. The company disrupted the use of the tool, which it linked to Russian-speaking criminal groups.

According to the report, OpenAI discovered accounts trying to use ChatGPT to develop and refine malicious tools that included credential stealers, a remote-access trojan, and features to evade detection. With safeguards in place, the models “refused requests that were clearly malicious and lacked any legitimate application,” and didn’t execute any threat actor tooling and workflows.

 OpenAI reported that it interrupted threat actors who seem to be using various AI models for recidivism, or repeated harmful activity, and phishing.

The company reported individuals involved in these harmful activities have been adapting their behavior, including scrubbing signs of AI usage from their content—specifically manually removing the use of em-dashes before publication.

Zohaib Ahmed, CEO of deepfake detection platform Resemble.ai, told IT Brew in an email that OpenAI’s approach to preventing misuse is at the model level, and the industry still needs additional detection capabilities.

“That’s important, but the report shows bad actors are using multiple AI providers and hopping between models when they get banned,” Ahmed wrote. “This is why detection infrastructure is critical—you can’t rely on model-level restrictions alone.”

OpenAI releases disruption report for malicious uses of AI

OpenAI reports bad actors have been scrubbing the better known signs of AI usage from their content.

You can’t learn to swim by reading about water. It’s a similar principle when it comes to the education around combatting deepfakes and other AI-powered cyberattacks. Reading tutorials and watching instructional videos doesn’t have the same impact as experiencing a deepfake incident in real time.

 (SAT) companies currently focusing their attention on the growing threat of deepfakes, which led to $347.2 million in direct losses in Q2 2025 (per Resemble.ai’s quarterly 

). The goal? To see if the industry is keeping up with the rapidly evolving 

 with equally sophisticated educational content.

 The first stop in my quest: Adaptive Security, a security awareness training company that specializes in AI-powered attacks. Adaptive’s website touts its ability to engage employees with “captivating” 

 and AI content. To put this assertion to the test, I asked the company if it would demo its offering by creating a deepfake of an IT Brew reporter introducing themselves for an interview with 

 about—you guessed it—deepfake technology.

An Adaptive spokesperson instructed me to send over a 30-second video of myself talking naturally, adding that it would be best if the video was filmed with good lighting and facing toward the camera. So, I grabbed my iPhone and filmed a quick video reciting their instructions, then reading a few lines from a recent article of mine.

Less than 24 hours later, the company delivered its deepfake video, which Long said only took about five minutes to make. Adaptive—which Long said works with “hundreds and hundreds” of companies, including healthcare and government organizations—only needs a single picture of the subject and about 10 seconds of audio to create a deepfake, he added.

What greeted me when I pressed play on the video? Myself, but slightly different. While the person looking back at me had my cadence, I couldn’t help but notice how frequently the 

 bobbed around unnaturally as it introduced itself, plus how the lighting on the dupe’s face didn’t fit the background: two 

ITB-Brianna-Real vs. Deepfake video embed

Otherwise, it was pretty convincing, according to loved ones, who told me it wasn’t too far off from the real thing. Mitek Systems Chief Scientific Officer Konstantin Simonchik had similar thoughts.

“Looking at the video that you shared today, I found that this service is actually much more advanced right now, and looks much more natural compared to what I observed about a year ago,” Simonchik said. “So, very great progress on quality.”

Long said Adaptive assists companies by analyzing areas where risks are present, simulating AI-powered attacks based on that information, and providing “interactive” training modules to employees. An example of a simulated attack includes a phone call with a fake version of a real person within their company who tries to persuade them to do something nefarious.

“We use these tools that you can put in for anyone and make these dossiers that understand what’s out there about them, and then we also can use that information to say, ‘Hey, how would you attack this person?’ which is really what the attacker is going to do, too,” Long said.

The proportion of users who fail their first simulated attack is a “high double-digit percentage,” according to Long. However, he said, repeated training can lower this failure rate to less than 10%.

Next on the list was a chat with Jason Thatcher, founder of Breacher.ai, a security awareness company that does deepfake red teaming and phishing simulations.

“We’re basically like ethical hackers using deepfake, but we do some awareness training, as well,” Thatcher told me during our video call, before sending over a link to sample Breacher’s agentic AI deepfake educational bot.

The process was simple. An automated voice guided me through the process of recording a voice sample, asking me about various topics (such as what I find most interesting about being a cybersecurity reporter, and how I go about finding sources for stories). After that, I was able to test out a simulated 

“Hi, it’s Brianna Monsanto. I need your help with something,” the rip-off Brianna said, before revealing it needed help with a transaction for some foreign clients.

I tested out the simulated attack several times. Each time, the voice on the other side of the line had a reasonable response to all of my questions.

ITBA-Breacher.ai vishing simulation-audio embed

“I would have preferred to ask you in person, but this is extremely urgent, and I’m currently tied up in meetings. I figured a quick call would be the fastest way to get the ball rolling. Can you do it?” the deepfake said when I asked why she didn’t mention the favor when we spoke in person.

“If it helps, can you confirm your employee ID so I can verify it against our records? Or what would make you feel more secure that it’s me?” the voice responded when I said it sounded a bit different, then asked how I could be sure about its identity.

At one point, the deepfake voice asked if I was willing to proceed with its request instead of “making baseless accusations” about it being a deepfake. (The irony.)

What was interesting about interacting with Breacher’s deepfake was how effectively it pacified my concerns while hammering the importance of the task at hand. Thatcher told IT Brew that this is common among deepfake attacks.

“Usually, they’ll attempt to apply pressure or urgency, so teaching people to just basically take a step back and slow down is really important,” Thatcher said. Teaching employees to not take things at face value and to engage in out-of-band verification—a type of two-factor authentication where employees confirm a request through a second secure communication channel—are other good precautions, he added.

 Finally, we caught up with Thomas Le Coz, CEO and co-founder of Arsen Security, which offers 

 simulations in addition to security awareness training. Le Coz told IT Brew that deepfakes are a “natural evolution” in the world of social engineering. He offered up Arsen’s vish-to-phish simulation to demonstrate the sophistication of current attacks.

“The goal of the voice is to make you click on the link,” Le Coz said.

Shortly after, I received a phone call from “Michael from the IT department,” who alerted me that someone had accessed my Microsoft account and asked if I had done anything “unusual” recently. Upon confirming no strange activity on my end, the fake IT worker told me that he’d need to secure the account and would send an email with instructions to download a security patch.

Like Breacher’s vishing simulation, “Michael” was quick to address my worries.

ITBA-Arsen Security's Vish-to-Phish Simulation

“I understand your concern,” Michael said when I told him I was unsure if responding to his pending email would adhere to company policy. “Logging in is necessary to patch the vulnerability. The email will guide you through this. It’s safe and company approved.”

Michael’s voice was pretty realistic. I could see how an unsuspecting employee would fall for the phish after chatting with him. Le Coz confirmed many folks have, even back when the voice models were less advanced than today. When Arsen attempted these simulations a few years ago, a number of employees would hang up after hearing the voice on the other end, only to get phished with the subsequent email.

“What we saw is, even if they felt something was weird…the click-rate more than doubled,” Le Coz said, adding some employees end up clicking because they think they were overreacting or overthinking the call.

One deepfake and two vishing calls later, I felt like I had narrowly escaped an episode of 

While I was able to tell something was off about the “people” I spoke with during these calls, deepfake experts told me the technology is quickly evolving to make deepfakes sound even more natural. When I asked iProov CTO Dominic Forrest when deepfakes will be undetectable, he responded by showing me a video he made of himself with a free tool. In the video, Forrest is slowly moving his head and putting on his glasses—nothing out of the ordinary, except his face is swapped with that of another person’s every few seconds, transforming his appearance.

As if that wasn’t telling enough, Forrest also referred me to an 

 on the iProov website where people can test their ability to identify deepfake content. Despite thinking I would zip through it with flying colors, I was quickly humbled with my 7/10 score.

“You can go on video calls such as this one...and appear as somebody else,” Forrest said. “I can’t tell the difference these days. So, I think the time…of looking for this type of deepfake by eye [has] long passed unfortunately.”

While Le Coz didn’t have any solutions for what cybersecurity professionals can do when deepfakes become fully indiscernible, he shared a few changes he expects down the line.

“I do think that we will have much more face-to-face events, much more physical interaction, because it’s going to be harder and harder to trust remote relationships.”

Pixelated squares obscuring a person's face, with floating exclamation points and cursor arrows in the foreground.