The Day-One Hole in Zero Trust Architecture
Specops pitches identity proofing at onboarding, citing North Korean fake IT workers as a zero-trust gap.
A sponsored BleepingComputer article by Specops Software argues zero trust fails if new-hire identities are weakly proofed. It cites FBI warnings that North Korean IT workers use stolen or fraudulent identities, proxies, and US-based facilitators to obtain remote jobs and receive legitimate credentials. Specops Secure Onboarding combines government-ID checks with biometric liveness before credentials, MFA, devices, or application access are issued, and later requires trusted-factor checks for service-desk requests.
- North Korean IT workers use fake identities to pass hiring and receive real credentials.
- MFA and device trust cannot fix a weakly proofed day-one identity.
- Specops Secure Onboarding adds document scanning and biometric liveness checks.
- Later service-desk actions require verification with enrolled factors.
- Vendors
- Specops Software
- Products
- Specops Secure Onboarding
- Organizations
- FBI
- Countries
- North KoreaUnited States
From the original article
4 min read at bleepingcomputer.com
Zero Trust can verify users once they are established, but onboarding creates a gap where organizations must decide who to trust before strong authentication exists. Specops explains why identity verification should begin before credentials, MFA methods, and access are issued. [...]
By Sponsored by Specops Software · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.