32Attackers keep getting in by calling your IT help desk and asking for an MFA reset. How do you redesign account recovery?▼hardNewMicrosoftGoogleCrowdStrike◆ premiumPhishing-resistant MFA is only as strong as the process that replaces it when someone loses their phone. Attackers have noticed, and so do interviewers.Open full answer →
24A finance employee is asked on a video call by a deepfaked 'CFO' to make urgent transfers. How do you defend against this?▼mediumNewJPMorgan ChaseMicrosoftGoogle◆ premiumThe Arup case cost about US$25 million because everyone on the call looked and sounded right. The control that works does not involve spotting the fake at all.Open full answer →