The $70 Helpdesk Ticket: How Password Resets Became the Front Door for Hackers
It costs $70 a pop to reset a forgotten password. But what if that mundane helpdesk ticket is actually a gaping security hole? The M&S breach shows us exactly how.
⚡ Key Takeaways
- The password reset process, costing organizations an average of $70 per reset, is a significant target for attackers. 𝕏
- Social engineering attacks on helpdesks can bypass MFA by tricking agents into resetting credentials, as seen in the M&S breach. 𝕏
- strong identity verification methods, such as multi-factor authentication for helpdesk requests and secure temporary credential delivery, are crucial to prevent breaches. 𝕏
Worth sharing?
Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.
Originally reported by Bleeping Computer
Related Stories
Vulnerabilities & CVEs
Axios NPM Hijack: When Social Engineering Goes Factory-Scale
Nation-State Threats
North Korean Hackers' Slick Slack Trick: Inside the Axios npm Compromise
Nation-State Threats
Drift's $285M Nightmare: DPRK's Nonce Social Engineering Masterclass
Nation-State Threats