[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCUY-DjMovGAWwFqUQtUZTLCgh8bvDmM5Y3ToUydDxSU":3},{"article":4,"iocs":48,"watch_terms":49,"solutions":50,"lesson":136},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"a0cde55d-fc14-446f-8a97-ac1004a94be7","How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team","how-to-run-a-deepfake-readiness-drill-before-a-cloned-voice-calls-your-team-72b689","Cloned voices and synthetic video calls now show up in payment fraud, help desk resets, and access requests. A structured drill shows security teams exactly where verification breaks down, while nothing is at stake. The call comes in at 4:40 on a Friday. It's the CFO, or it sounds exactly like her, asking the controller to push a supplier payment out before the weekend because a deal closes","A growing number of organizations are experiencing deepfake attacks, with a significant percentage of cybersecurity leaders reporting incidents involving cloned voices and synthetic video calls. These attacks are used for payment fraud, unauthorized access requests, and account takeovers, highlighting a critical gap in traditional verification processes. The article suggests conducting readiness drills to test and improve these verification procedures before real attacks occur.","Organizations are increasingly targeted by deepfake audio and video attacks for fraud and account takeovers.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Fhow-to-run-deepfake-readiness-drill.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEiEYzcrs6sSW45od6MYo5jFl29yPGuwipgy7nfS3STYqknrD9b5OcU00_c0sqjG8Arvqq36ojwHSZMbjboA3bUQ1-ZcLRRjmuEQpzTDYYXnyvySzynW0UOvHOVmYNNzp_n-J5xXmwByMCofw5kxslXe4dqAVYqrWa-1LivXxPNa_ZGOQgIBxhyhvtiLxDs\u002Fs1600\u002Ficon.jpg","2026-10-14T11:50:00+00:00","2026-10-14T14:00:09.919683+00:00",8,[17,20,22,24,26,29],{"name":18,"type":19},"deepfake","technology",{"name":21,"type":19},"Artificial Intelligence",{"name":23,"type":19},"voice cloning",{"name":25,"type":19},"synthetic video",{"name":27,"type":28},"MFA token","product",{"name":30,"type":31},"Account Takeover","campaign","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":32,"icon":34,"name":35,"slug":36},null,"Threat Intelligence","threat-intelligence",[38,43],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":44},{"id":45,"icon":34,"name":46,"slug":47},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",[],[27],{"controls":51,"vendors":135},[52,81,110],{"slug":53,"name":54,"problem":55,"products":56},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[57,65,73],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"acalvio","Acalvio","\u002Fvendor-logos\u002Facalvio.png","shadowplex-identity-protection","ShadowPlex Identity Protection","https:\u002F\u002Fwww.acalvio.com\u002Fproducts\u002Fidentity-protection\u002F","Decoy accounts and credentials that expose identity attacks and credential misuse early.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"slug":82,"name":83,"problem":84,"products":85},"breach-attack-simulation","Breach and attack simulation","You only find out whether your security tools stop an attack when a real attacker tries.",[86,94,102],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"cymulate","Cymulate","\u002Fvendor-logos\u002Fcymulate.png","cymulate-exposure-validation","Cymulate Exposure Validation","https:\u002F\u002Fcymulate.com\u002Fexposure-validation\u002F","Tests security controls, cloud defences and response playbooks against real threats to show which exposures are exploitable.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"pentera","Pentera","\u002Fvendor-logos\u002Fpentera.png","pentera-platform","Pentera Platform","https:\u002F\u002Fpentera.io\u002Fpentera-platform\u002F","Runs automated, safe attacks in production to validate exploitable attack paths, prioritise proven risk and confirm fixes. Modules cover internal networks, the external attack surface and cloud.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"horizon3-ai","Horizon3.ai","\u002Fvendor-logos\u002Fhorizon3-ai.png","nodezero","NodeZero","https:\u002F\u002Fhorizon3.ai\u002Fnodezero\u002F","Continuous autonomous penetration testing of internal and external networks, cloud, Kubernetes and web applications, showing which attack paths work and checking that fixes hold.",{"slug":111,"name":112,"problem":113,"products":114},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[115,122,129],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":111,"product_name":119,"url":120,"description":121},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":123,"product_name":126,"url":127,"description":128},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":130,"product_name":131,"url":133,"description":134},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",[],{"slug":137,"title":138,"body":139,"framework_refs":140,"framework_notes":151},"deepfake-voice-cloning-exposes-gaps-in-identity-verification","Deepfake Voice Cloning Exposes Gaps in Identity Verification","Organizations are increasingly targeted by threat actors using AI-generated voice and video clones to impersonate executives, employees, or trusted contacts — bypassing traditional verification processes that rely solely on voice recognition or visual confirmation. The root problem is that most teams have never been trained or tested on how to respond when a 'trusted' voice or face cannot be taken at face value. This matters because deepfake attacks directly enable payment fraud, unauthorized access grants, and account takeovers, often with no technical exploit required — just social engineering enhanced by synthetic media. Without pre-planned verification protocols and practiced drills, employees are left improvising under pressure, making costly mistakes. Proactive readiness exercises are essential to close this human-layer vulnerability before real attackers exploit it.",[141,142,143,144,145,146,147,148,149,150],"CIS Control 14 – Security Awareness and Skills Training","CIS Control 6 – Access Control Management","NIST SP 800-53 IA-2 – Identification and Authentication","NIST SP 800-53 AT-2 – Literacy Training and Awareness","NIST SP 800-53 IR-3 – Incident Response Testing","NIST CSF ID.RA-1 – Asset Vulnerabilities Identified","NIST CSF PR.AT-1 – Users Informed and Trained","ISO\u002FIEC 27001 A.6.3 – Information Security Awareness, Education and Training","ISO\u002FIEC 27001 A.5.17 – Authentication Information","GDPR Article 32 – Security of Processing (appropriate technical and organisational measures)",{}]