Fastpasscorp

10/07/2026

Someone calls your IT help desk. They say they're locked out. Their phone is broken. Their passkey is gone.

What does your agent check before resetting their password?
If the answer is "name, employee ID, and manager's name" — that's exactly what an attacker prepares before making the call.

There's a safer answer, and it comes from your own company's systems. The data your ITSM, HR platform and asset management hold about each employee — recent tickets, issued devices, approved requests — isn't online, isn't guessable, and changes constantly.

That's the method we break down in our new blog. Worth a read if your help desk handles password resets or MFA recovery.

7-minute read. Link below. 👇

https://www.fastpasscorp.com/blog/workforce-identity-verification-password-mfa-reset/?utm_source=Facebook&utm_medium=Facebook&utm_campaign=fb-wiv-blog&utm_id=fb-wiv-blog

09/10/2026

MGM. Clorox. Marks & Spencer. Co-op. Jaguar Land Rover. Five different companies, same attack: one convincing phone call to the help desk. JLR's outage alone cost the UK economy an estimated £1.9 billion. No malware needed — just an under-verified caller.

Swipe through five years of these breaches.

Your organization’s next defense isn’t another firewall. It’s your help desk identity verification strategy.
Now is the time to act — before the attackers call your company next.
Learn more: https://www.fastpasscorp.com/products/identity-verification-manager/?utm_source=Facebook&utm_medium=Facebook&utm_campaign=5-Data-breaches-post-IVM&utm_id=5-Data-breaches-post-IVM

08/28/2026

Two Microsoft deadlines. One unresolved problem.

📅 September 1 — passkeys become the default in Microsoft Entra
📅 February 1, 2027 — SMS and voice authentication retire

Both changes push more users to the help desk when they can't get in. If your help desk is still verifying callers with static data — a name, an employee ID, a date of birth — you haven't closed the gap passkeys were supposed to close.

We wrote the blog. We also wrote the whitepaper. Both are free, both are at the link below. Start with the blog and download the full report from there.

12-minute read Whitepaper:🔗https://www.fastpasscorp.com/blog/microsoft-entra-passkeys-identity-verification-gap/?utm_source=Facebook&utm_medium=Facebook&utm_campaign=Verification-Passwordless-Future-Whitepaper-blog&utm_id=Verification-Passwordless-Future-Whitepaper-blog

08/27/2026

Microsoft Entra goes passwordless by default on September 1.

Here's the part most IT teams haven't solved yet: passkeys are device-bound. When the device is gone — lost phone, new handset, dead battery — there's nothing to "reset." The user calls the help desk. And whoever answers that call is now your identity verification control.

If that process is still name + employee ID, you haven't closed the gap. Read why — and what to do about it:

🔗https://www.fastpasscorp.com/blog/microsoft-entra-passkeys-identity-verification-gap/?utm_source=Facebook&utm_medium=Facebook&utm_campaign=Entra-Passwordless-Whitepaper-blog&utm_id=Entra-Passwordless-Whitepaper-blog

07/06/2026

Quick test for anyone in IT or security: call your own help desk. Pretend to be a locked-out exec with an urgent meeting. See what it actually takes to get your password reset.

If the answer is "I'd use my judgement" or "I'd try to reach their manager" - you've just found a security gap that costs organizations an average of $4.67M when attackers find it first (IBM/Ponemon, 2025).

We broke down how this attack works — and why the usual fixes (MFA, manager approval) don't fully solve it. Read more here:
👇
https://www.fastpasscorp.com/blog/the-help-desk-verification-gap-how-credential-breaches-really-start/?utm_source=Facebook&utm_medium=Facebook&utm_campaign=facebook-ibm2025-blog&utm_id=facebook-ibm2025-blog

Compromised credentials cost organisations $4.67M on average, yet most help desks have no reliable way to verify who's calling. Learn what closes the verification gap — and why standard recommendations fall short.

03/31/2026

Cybercrime groups are now recruiting women to perform vishing attacks against IT help desks.

How are your organizations actually verifying employees before resetting credentials?

Learn why strong workforce identity verification is now essential: https://www.fastpasscorp.com/blog/scattered-spider-help-desk-vishing-attacks-women/?utm_source=Facebook&utm_medium=Facebook&utm_campaign=FB-SSWomen-Blog-4&utm_id=FB-SSWomen-Blog-4

02/11/2026

Attackers no longer need to hack — they just need to talk.

Recent breaches at Marks & Spencer, Harrods, Co-op, and Jaguar Land Rover (JLR) have exposed a pattern: attackers no longer need to break down digital doors when they can simply call the helpdesk and ask for the keys.

Read this informative article to know why your Service Desk is the new attack vector and what you can do to defend it: https://insight.scmagazineuk.com/your-service-desk-is-the-new-attack-vector?utm_source=Facebook&utm_medium=Facebook&utm_campaign=servicedesk-article&utm_id=servicedesk-article

12/09/2025

Many of the biggest, high-profile data breaches since 2020 started with one tactic: tricking the help desks or service desks. Attackers gained unauthorized access—often stealing passwords or credentials that unlocked further systems.

Here’s a timeline of notable incidents across North America, the UK, and Europe, and what was compromised in each case: https://www.fastpasscorp.com/blog/social-engineering-breaches-via-help-desk-attacks/?utm_source=Facebook&utm_medium=Facebook&utm_campaign=blog-social-engineering-cases&utm_id=blog-social-engineering-cases

Learn how to protect your help desk from vishing and social engineering attacks before they happen.
Contact FastPass: https://www.fastpasscorp.com/contact/?utm_source=Facebook&utm_medium=Facebook&utm_campaign=blog-social-engineering-cases&utm_id=blog-social-engineering-cases

12/04/2025

Imagine a help desk that verifies users seamlessly, flags suspicious activity automatically, and enhances security without disrupting operations. That's precisely what a leading Fortune 500 medical company accomplished with FastPass IVM (Identity Verification Manager).

Discover the full story and more case studies on how Fastpass IVM is transforming help desk security with secure user verification. Protect the help desk with forced identity verification process: https://www.fastpasscorp.com/fastpass-ivm-case-studies/?utm_source=Facebook&utm_medium=Facebook&utm_campaign=case-study-video&utm_id=case-study-video

Contact FastPass directly : https://www.fastpasscorp.com/contact/?utm_source=Facebook&utm_medium=Facebook&utm_campaign=case-study-video&utm_id=case-study-video

11/12/2025

The Salesforce data breach started with a phone call.

Hackers didn’t hack firewalls — they called IT help desks, pretending to be real employees.

It’s a powerful reminder that the biggest security risks often come from social engineering, not technology failures.

Your help desk handles sensitive access every day. The question is: how do you verify who’s on the other end of the line?

Learn how to protect your help desk from vishing and social engineering attacks before they happen:
👉 https://www.fastpasscorp.com/blog/salesforce-data-breach-help-desk-social-engineering/?utm_source=Facebook&utm_medium=Facebook&utm_campaign=nov12_FB_salesforceblog&utm_id=nov12_FB_salesforceblog

The Salesforce data breach proves hackers don’t need malware — just a phone call. Learn how to protect your help desk from vishing and social engineering attacks.