[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBBci0_lRKV1xty2R4ztjnc1dQ-8nJI8QtZs3Fv-j-WY":3},{"article":4,"iocs":39,"watch_terms":40,"solutions":41,"lesson":127},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":31},"6d5c111b-b1dc-4bf6-9b9f-bc4c3f0dce8c","A familiar face is no longer proof: rethinking social engineering defence for the deepfake era","a-familiar-face-is-no-longer-proof-rethinking-social-engineering-defence-for-the-c6b5d6","Deepfakes have spent much of their short history being treated as a curiosity. According to Anne Cutler, cybersecurity expert at Keeper Security, that complacency is now a risk in itself. “For many people, deepfakes still feel like an internet novelty – a fake celebrity video, an altered image or an amusing example of what AI […] The post A familiar face is no longer proof: rethinking social engineering defence for the deepfake era appeared first on IT Security Guru.","Cybersecurity experts are warning that the growing sophistication of deepfakes poses a significant threat to social engineering defenses. Previously dismissed as internet novelties, deepfakes are now capable of impersonating familiar faces convincingly, eroding trust in visual and auditory evidence. This shift requires a fundamental rethinking of how individuals and organizations protect themselves against AI-powered manipulation.","Deepfakes are evolving from novelty to significant social engineering risk.","https:\u002F\u002Fwww.itsecurityguru.org\u002F2026\u002F10\u002F05\u002Fa-familiar-face-is-no-longer-proof-rethinking-social-engineering-defence-for-the-deepfake-era\u002F?utm_source=rss&utm_medium=rss&utm_campaign=a-familiar-face-is-no-longer-proof-rethinking-social-engineering-defence-for-the-deepfake-era",null,"2026-10-05T11:52:23+00:00","2026-10-05T12:00:19.010546+00:00",7,[17,20,23,25],{"name":18,"type":19},"Keeper Security","product",{"name":21,"type":22},"deepfakes","technology",{"name":24,"type":22},"AI",{"name":26,"type":22},"social engineering","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":27,"icon":12,"name":29,"slug":30},"AI Security","ai-security",[32,34],{"category":33},{"id":27,"icon":12,"name":29,"slug":30},{"category":35},{"id":36,"icon":12,"name":37,"slug":38},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":42,"vendors":126},[43,72,101],{"slug":44,"name":45,"problem":46,"products":47},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[48,56,64],{"vendor_slug":49,"vendor_name":50,"vendor_logo":51,"product_slug":52,"product_name":53,"url":54,"description":55},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"slug":73,"name":74,"problem":75,"products":76},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[77,85,93],{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-itdr","Huntress Managed ITDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-itdr","Managed detection of suspicious activity in Microsoft 365 and Entra ID.",{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-identity","Microsoft Defender for Identity","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-for-identity","Detects attacks against on-premises Active Directory and hybrid identities.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"slug":102,"name":103,"problem":104,"products":105},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[106,113,120],{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":102,"product_name":110,"url":111,"description":112},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":114,"product_name":117,"url":118,"description":119},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":121,"product_name":122,"url":124,"description":125},"hoxhunt","Hoxhunt","\u002Fvendor-logos\u002Fhoxhunt.png","https:\u002F\u002Fhoxhunt.com\u002F","Adaptive phishing simulations and micro-training, with a focus on reporting.",[],{"slug":128,"title":129,"body":130,"framework_refs":131,"framework_notes":142},"deepfakes-shatter-trust-in-visual-identity-verification","Deepfakes Shatter Trust in Visual Identity Verification","The rapid advancement of deepfake technology has fundamentally undermined one of humanity's most instinctive security mechanisms: recognizing a trusted face or voice. Social engineering attacks have historically relied on impersonating authority figures, but AI-generated deepfakes now allow attackers to convincingly replicate the appearance and voice of colleagues, executives, or clients in real time. This erodes the informal trust signals that organizations have long depended upon — such as a video call with a known contact — without any corresponding technical safeguard in place. The consequences are severe, ranging from fraudulent wire transfers authorized by fake CFOs to sensitive data handed over during convincing impersonation calls. Organizations that fail to adapt their verification processes to this new threat landscape are leaving critical decisions vulnerable to AI-powered manipulation.",[132,133,134,135,136,137,138,139,140,141],"CIS Control 14 – Security Awareness and Skills Training","CIS Control 6 – Access Control Management","NIST SP 800-53 AT-2 – Literacy Training and Awareness","NIST SP 800-53 IA-3 – Device Identification and Authentication","NIST SP 800-53 IR-6 – Incident Reporting","NIST CSF ID.RA-2 – Cyber threat intelligence shared with relevant stakeholders","ISO\u002FIEC 27001:2022 A.6.3 – Information Security Awareness, Education and Training","ISO\u002FIEC 27001:2022 A.5.16 – Identity Management","GDPR Article 32 – Security of Processing (appropriate technical and organisational measures)","ITIL 4 – Risk Management and Security Management Practices",{}]