Trusona

A help desk ticket records who called, what they asked for, and which agent said yes. Check whether it records how the agent knew the caller was real. CISA's advisory on Scattered Spider describes operators calling IT help desks to get passwords reset and MFA moved to a device they control (AA23-320A, revised July 2025). The call is the attack. The ticket is the paper trail. If the identity check's result doesn't reach the ticket automatically, the paper trail holds only what someone added about it by hand. ATO Protect can run from the ticket in ServiceNow, Zendesk, Jira Service Management, Ivanti, Freshdesk, and any other ticketing tool your team uses. Full piece: https://lnkd.in/gxAX9yB3 #HelpDesk #IdentityVerification #ITSM

Aaayyyyy! New Gartner insights! Those of you of a certain age will fondly remember The Fonz from the TV show Happy Days, who was the epitome of cool. Well, we can't be quite that cool at Gartner, but we just published our latest insights Coolest Vendor Innovations in Identity Management. We profile innovations from a number of vendors in the identity space. There is a lot of interesting stuff going on out there. I was pleased to contribute two profiles: 😎 The first for ToothPic for their smartphone-as-hardware-token product, using the unique characteristics of a smartphone camera to create an immutable hardware token. 😎The second for Trusona for their suite of solutions to protect the IT service desk from social engineering attacks, as well as other identity impersonation use cases. Well done and thank you to my colleague Brian Guthrie for leading the effort. Clients can access the insights here: https://lnkd.in/eFR464zt Image of Henry Winkler as The Fonz

Congratulations to the Trusonauts! 🏆 🥇 🎉 Trusona named Access Management Solution of the Year in the 2026 CyberSecurity Breakthrough Awards. https://lnkd.in/g-MBBVPn

Under the 1986 law behind the Form I-9, a document passes the employer's check if it "reasonably appears on its face to be genuine." That test is a look. The statute does not say where the look must happen. Since August 1, 2023, an employer that participates in E-Verify in good standing may, if it chooses, do that look over a live video call instead of in the room. The regulation's standard did not change: the documents must "appear to be genuine and to relate to the individual." DHS was open about what the call gives up. It wrote that "Remote document examination, by itself does not provide this level of detailed inspection." It also said it was "confident that the alternative procedure offers at least an equivalent level of security," and that it lacked data on fraud or error rates for the procedure. Both statements can be true. What they leave in place is the judgment that ties a person to a document. That judgment was a person's before 2023 and is a person's now, in a room or in a window on a screen. Ori Eisen, Trusona's founder and CEO, sets out the history and the limits of that check in The Identity Perimeter. Trusona checks a government-issued ID against the authority that issued it. The essay makes no claim about what that check would have changed in any case it describes. https://lnkd.in/gSM2XY7B Sources: 8 U.S.C. 1324a(b)(1)(A); 8 CFR 274a.2(b)(1)(ii)(A); DHS and ICE, 88 FR 47749 and 88 FR 47990, July 25, 2023. #IdentityVerification #IdentityProofing #FormI9

PSA from the FBI: Don't wait to be a victim. "Alert Number: I-101326-PSA | 13 October 2026 North Korean IT Workers Expanding Use of Facilitators, Broadening Recruitment The Democratic Peoples Republic of Korea (North Korea) continues to improve its tactics to infiltrate western companies with thousands of state-controlled remote IT Workers (ITWs) while avoiding detection. ITWs are increasingly using facilitators to counter improved private sector detections and law enforcement actions. The FBI has observed North Korean ITWs use stolen identities, extort victims, and use threats of physical violence to demand payments. ITWs fund North Koreas government, including its nuclear weapons and other military programs, and pose a significant national security and intellectual property theft insider threat." https://lnkd.in/g2_eunjr

The 2026 CyberSecurity Breakthrough Awards named Trusona Access Management Solution of the Year. Our job is proving that the person asking for a password reset or a wire transfer is who they claim to be. Attackers have gotten very good at faking that with cloned voices and a convincing story for the help desk. We built Identity Impersonation Detection (IID) to check the person against authoritative sources instead, with no selfie and no data on file. Thank you to the judges, and to the help desk and security teams who put ATO Protect to work every day. #IdentitySecurity #AccountTakeover

Great to see that Microsoft is going to allow third parties to detect deepfakes on video calls! NOTE: One of the simplest attack vectors is to turn off the video, and use excuses like: My religion prohibits me from showing my face My internet speed is slow, so we will use only voice [Fill in the blank] This is why Trusona designed its Identity Impersonation Detection to work in ANY channel, and not let the attacker block the detection signals. As a wise risk manager once taught me: Don't let them turn you to a turnstile in the middle of the desert. https://lnkd.in/gusf8sDn

Nobody has beaten our Hack the Box challenge yet. The goal is simple: convince us you're our CEO, Ori Eisen. Think you can? https://try.trusona.com #Cybersecurity #Deepfakes #SocialEngineering #WhyWouldIDeceiveYou #IdentityImpersonationDetection