The Day-One Hole in Zero Trust Architecture

Zero Trust architectures assume strong identity verification, but the onboarding window — before MFA and robust credentials are fully established — creates a critical vulnerability that attackers actively exploit. North Korean state-sponsored actors have demonstrated this by infiltrating organizations using fraudulent identities during remote hiring processes, effectively bypassing the security controls that Zero Trust promises. The core failure is treating new user onboarding as a lower-risk process than ongoing authentication, when in reality it is the most exploitable moment in the identity lifecycle. Without rigorous identity proofing at the point of hire — equivalent to or stronger than controls applied to existing users — organizations are handing adversaries a trusted foothold before security controls are even applied.