Daniel Imber

For too many service desks, identity verification still relies on asking the caller questions that only the real employee should be able to answer. Unfortunately, security questions don’t stand up particularly well against modern attacker techniques. Employee IDs, dates of birth, manager names, job titles and office locations can often be found through social media,…

An employee calls the service desk. They’ve replaced their phone, they explain, and can’t access Microsoft Authenticator. They know their employee number and their manager’s name, and just need to access their account before an important meeting. They even sound like the employee. So how does the service desk know who is actually calling? Generative…

Seasonal hiring for many organizations means creating large numbers of workforce identities in a short space of time. New starters need immediate access to systems and data, often before IT has had an opportunity to get to know them. That pressure can introduce gaps in the onboarding process, not because IT teams don’t care about…

Numerous high-profile breaches in recent years have highlighted a critical weakness in enterprise security. The 2025 M&S ransomware attack lost the UK retailer around £300 million ($397 million) in operating profit. Two years earlier, MGM Resorts reported losses of more than $100 million after attackers caused widespread outages across its Las Vegas properties. A common…