Help Net Security2026-09-18 05:00:51

98% of fraudulent hires have company credentials by the time they’re caught

A 90-day period between hiring and onboarding is creating a blind spot in enterprise identity security, according to HYPR’s State of HR Identity Fraud Detection report.

Summary

“Adversaries no longer need to breach a network when they can pass a remote interview and receive authentic credentials directly from IT,” said Bojan Simic, CEO of HYPR. “Human intuition is not a security control. Sceptics might point to low reported numbers, but the lack of purpose-built verification technology ...

cybersecuritycredentialsnewsfraudidentity verificationhypraccess management

This is a brief wire summary — the full story (linked below) has the complete details.

KazaSec's take

Incidents like this rarely start with the headline event itself — they usually trace back to an exposed remote-access endpoint, an unpatched perimeter system, or a credential phished weeks earlier. The organizations that recover fastest are the ones that tested their defenses and their incident response plan before they needed them.

Coverage details

Source: Help Net Security
Published: 2026-09-18 05:00:51
Author: anamarija pogorelec
Category: technology

We've archived 232 other articles touching the same topic (cybersecurity, credentials, news) — see the full security news archive.

Worried this kind of story could be about you next?

We help organizations find and fix the gaps before they make headlines.

Request a Security Assessment Browse Services