Hackers Don’t Break In; They Log In
samuel watua Soita — Full Stack Software Engineer
Reshared from a post by Laurent H.
Hackers Don’t Break In; They Log In
Most people think of security concerns in terms of hacking. In the case of deepfakes, however, no hacking may be required. The holes in our security networks often lie in our humanity: the judgment calls made by customer service or human resources staff. To defend against AI-enabled impersonation, organizations must stop trusting what merely looks or sounds right and start requiring proof.
Helping others makes us feel good, and we are hardwired to prefer trust over mistrust. When someone tells us who they are, we want to believe them. Attackers understand this. They often come armed with a plausible story of difficulty and frustration, such as being locked out of a car with a crying child or needing to authorize payroll after a reorganization. We all know how it feels to have one of those days when everything goes wrong, so these stories spark empathy in helpdesk operators who are trained to support callers, not interrogate them.
https://www.cybersecurity-insiders.com/hackers-dont-break-in-they-log-in/
5 reactions · 1 comments
Comments
Schomer: Incredibly accurate, Laurent. The hardest boundary to secure is always human empathy. When deepfakes allow an attacker to seamlessly manipulate the helpdesk, they bypass traditional identity perimeters entirely because the operator willingly hands over the keys. This exact problem is why we developed ETBV. When human judgment calls inevitably fail, the technical architecture must serve as the abso