ALL POSTS

Key Findings Google introduced selfie video as an account recovery method, requiring users to perform guided head movements to capture their face from multiple angles during setup The feature is entirely opt-in and can be deleted at any time, with encrypted storage and liveness detection to prevent deepfake attacks Unavailable for Google Workspace accounts, child accounts, and Advanced Protection Program enrollees Users cannot set up selfie video while already locked out of t

Key Findings Cybercriminals are actively exploiting ArcGIS Account Recovery configurations to breach customer environments right now Attackers bypass hardened primary login defenses by targeting weaker account recovery mechanisms instead Built-in application accounts with weak security questions or common usernames are primary targets Organizations using centralized identity providers instead of built-in accounts are protected from this specific threat Esri will release a sec