Identity Impersonation Detection White Paper Read Now

Blog

Working notes on account takeover, help desk social engineering, deepfake fraud and identity verification, written for the security and IT teams who handle account recovery.

72 pieces Latest August 21, 2026

Blog
The fake employee problem: North Korean IT workers and deepfaked interviews

Nothing is breached. Someone is onboarded and paid through the normal process, and the failure happened at hiring.

August 21, 2026
Blog
SIM swap protection for enterprises: how to check, detect, and block it

The first sign is usually the phone going quiet. By then the one-time passcodes have been arriving somewhere else for a while.

August 21, 2026
Blog
CEO fraud and executive impersonation: verify the person behind the wire

The target is rarely the executive. It is the person who processes the request, and the approval chain assumes someone else already checked who…

August 21, 2026
Blog
Account recovery in Microsoft Entra ID: the complete playbook

Entra ID has five ways back into an account. Two run automatically, and the other three end with a person deciding who is on…

August 21, 2026
Blog
Agent verification: proving your help desk is really your help desk

Agent verification runs the help desk check backwards: the employee confirms the agent is genuine before sharing a code or approving a prompt.

August 21, 2026
Blog
How to verify users without pre-registration

Most identity verification assumes the user enrolled something first. The never-enrolled users are the ones attackers call about.

Ori Eisen August 21, 2026
Blog
MFA fatigue, MFA bypass, and the reset desk: three ways MFA actually fails

Teams that have deployed phishing-resistant MFA often still leave the reset path wide open.

August 21, 2026
Blog
What is identity proofing? NIST 800-63 in plain English

Authentication asks if this is the same account holder as last time. Identity proofing asks who they are. An attacker with the account passes…

August 21, 2026
Blog
How to reset MFA safely: Entra ID, Microsoft 365, Okta, and Duo

Resetting MFA is a minute's work, and every vendor documents it. Deciding whether the person asking should get one is the part nobody documents.

August 21, 2026
Blog
What is account takeover?

The account is occupied rather than broken. It keeps working normally, which is what makes a takeover hard to see.

August 21, 2026

Browse other categories

trusona icon
Powered by  GDPR Cookie Compliance
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.