Password resets, commonly used to regain access to accounts, are a prime vulnerability for attackers. Research from Specops Software reveals that social engineering targeting helpdesks can turn legitimate reset requests into complete account takeovers.
Password reset processes represent a critical security gap that attackers routinely exploit. Rather than cracking complex passwords, threat actors target the reset mechanism itself by impersonating users to helpdesk staff.
Specops Software's findings demonstrate how social engineering—manipulation of helpdesk personnel—can bypass technical security controls entirely. Attackers contact support teams with convincing pretexts to authorize password resets, gaining full access without brute force or phishing campaigns.
The vulnerability stems from the human element. Helpdesk staff operate under pressure to assist users quickly, making them susceptible to social engineering tactics. Attackers exploit this by researching targets beforehand and providing seemingly legitimate verification details.
Organizations relying on regular password resets as their primary security measure face increased risk. Security protocols must strengthen reset authentication processes, implement stricter identity verification procedures, and provide helpdesk training on social engineering detection. Multi-factor authentication and passwordless authentication methods offer more resilient alternatives to traditional password management.
Visa is enabling expired payment cards to continue processing contactless transactions through a new feature. The move allows cardholders to keep using their old cards for tap-to-pay purchases even after expiration.
A Texas-based student discovered and reported an unauthorized AI system being used for cyberattacks. The disclosure prompted immediate investigation and security responses from affected organizations.
Iranian cyber actors shut down a small UK power generation facility for four days, according to sources cited by The Telegraph. The incident coincides with a broader wave of attacks targeting US water utilities attributed to Iran-affiliated groups.
A supply-chain attack is exploiting legitimate device-update apps to infect Android-based car head units with malware. The compromised devices are being enlisted into proxy botnets or used for ad fraud schemes.