New: Account Recovery+ for Entra ID Read Now

Blog

Working notes on account takeover, help desk social engineering, deepfake fraud and identity verification, written for the security and IT teams who handle account recovery.

79 pieces Latest November 3, 2026

Blog
How Banks Can Let Customers’ AI Agents In: Verify the Person Who Authorized the Agent

JPMorgan blocks outside AI agents from acting on customer accounts. The alternative lets any agent in on a login. The third option is to…

November 3, 2026
Blog
Verify the Caller Without Leaving the Ticket

CISA's Scattered Spider advisory describes callers who talked IT help desk staff into resetting passwords and moving MFA to a device the caller controlled.…

October 27, 2026
Blog
The Caller Had the Last Four of the SSN. Then Came the Broken Phone.

HHS's Health Sector Cybersecurity Coordination Center (HC3) describes a caller who passed a healthcare help desk's identity check with an SSN's last four digits…

October 20, 2026
Blog
Cybersecurity Awareness Month Says Verify the Caller. At the Help Desk, That’s Harder.

CISA's 2026 Cybersecurity Awareness Month materials tell people to verify an unexpected call through a phone number they already have. At a help desk,…

October 6, 2026
Blog
TfL made 28,000 employees show up in person to reset a password

When TfL's network was compromised, the way out was 28,000 employees showing up at an office in person. ATO Protect Account Recovery+ for Entra…

September 16, 2026
Blog
Verifying people who don’t have a Social Security number

The SSN sits in most US verification scripts as the fallback question. For a sizeable part of your user base there is no answer…

September 1, 2026
Blog
Your AI agent is about to act for someone. Who checked that someone?

An agent acting on someone's behalf inherits their authority without inheriting any way to confirm they are who they say they are.

September 1, 2026
Blog
The fake employee problem: North Korean IT workers and deepfaked interviews

Nothing is breached. Someone is onboarded and paid through the normal process, and the failure happened at hiring.

August 21, 2026
Blog
SIM swap protection for enterprises: how to check, detect, and block it

The first sign is usually the phone going quiet. By then the one-time passcodes are already going somewhere else.

August 21, 2026
Blog
CEO fraud and executive impersonation: verify the person behind the wire

The target is rarely the executive. It is the person who processes the request, and the approval chain assumes someone else already checked who…

August 21, 2026

Browse other categories

trusona icon
Powered by  GDPR Cookie Compliance (opens in a new tab)
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.