As cited
Copy frozen at (site build).
identity access
Closing the Identity Gap at the Service Desk
Attackers exploit IT service desks by impersonating employees to bypass multifactor authentication (MFA), requesting password resets or new device registration without proper verification. Traditional identity verification at the service desk is insufficient against social engineering tactics. Organizations need stronger account recovery procedures to mitigate these risks.
Why it matters: Service desk and IT operations teams are targeted daily; practitioners must implement stricter identity verification protocols and controls around password resets and MFA device registration to prevent unauthorized account access.
- Source published
- First seen by Cybersecurity Tracker