AI-Driven Identity Attacks Are Surging, PwC Warns

Companies are increasingly falling victim to AI impersonation scams. This startup just raised $28M to stop deepfakes in real time

As scammers use AI to mimic trusted employees, flood help desks, and take over enterprise tools, one startup says the only defense is spotting the invisible signals even perfect deepfakes can’t spoof.

The AI Security Gap No One’s Watching in Australian Enterprises

New global security research shows exactly how unmonitored AI agent permissions get exploited inside the enterprise — and Australian identity governance, built around human employees, isn't set up to catch it. The post The AI Security Gap No One’s Watching in Australian Enterprises appeared first on TechRepublic.

Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access

A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt Microsoft 365 users to enroll a new Entra passkey with an aim to carry out data extortion attacks. The threat actor, tracked by Okta under the moniker O-UNC-066, has deployed a panel-controlled phishing kit that's capable of targeting the passkey enrollment process. The