New: Account Recovery+ for Entra ID Read Now

Blog

Working notes on account takeover, help desk social engineering, deepfake fraud and identity verification, written for the security and IT teams who handle account recovery.

76 pieces

Showing 10 of 76

For your customers, News
From the Desk of Ori Eisen: The Global Threat of North Korean IT Workers and AI‑Generated Fake Documents

In recent years, the United States and its allies have documented a state‑sponsored program in which North Korea sends information‑technology workers (ITWs) overseas to…

Ori Eisen December 9th, 2025
Blog
The $100M MGM Hack Started with One Help Desk Call. Are You Protected?

In September 2023, MGM Resorts International suffered a cyber incident that disrupted hotel operations, slot machines, and reservation systems for days.

Ori Eisen December 1, 2025
Blog
Protect High‑Value Accounts from Voice Social Engineering

High‑value accounts belong to executives, administrators, and other individuals with access to sensitive data and systems.

Ori Eisen November 20, 2025
Blog
Stop Being the Weakest Link: Help Desk Security Made Simple

Help desks occupy a paradoxical position. Their purpose is to help employees regain access quickly, yet this very helpfulness makes them prime targets for…

Ori Eisen October 28, 2025
Events, Webinars
Webinar – Carahsoft & Trusona on the Blueprint to Defeat Social Engineering

Event Date: October 02, 2025 Hosted By: Trusona & Carahsoft

Ori Eisen October 2nd, 2025
Blog
Board‑Level Question: What’s Your Help Desk Social Engineering Defense?

Cybersecurity risk has become a top concern for corporate boards. High‑profile breaches and new regulations highlight the financial and reputational impacts of security incidents.…

Ori Eisen October 18th, 2025
Blog
Scattered Spider’s Playbook: What Every CISO Needs to Know

Scattered Spider is a loosely organized but highly effective threat actor known for targeting large organizations. They specialize in social engineering rather than sophisticated…

Ori Eisen October 15, 2025
Blog
Prevent the Next $100M MGM-Style Breach

In 2023, MGM Resorts International faced a cyberattack that shut down hotel operations, disrupted slot machines and cost the company roughly US$100 million. The…

Ori Eisen October 9, 2025
Blog
The Evolution of Social Engineering: From Phishing to Vishing

Social engineering has evolved from email phishing to phone-based vishing. Explore how attackers adapt and how defenses must evolve too.

Ori Eisen September 26, 2025
Blog
Why GenAI Makes Help Desk Attacks 10× More Dangerous

Generative AI makes help desk attacks 10x more dangerous. See how voice cloning and automation supercharge social engineering.

Ori Eisen September 23, 2025
trusona icon
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.