Identity Attack Vectors

An identity can be attacked by the person owning the identity or any of the related accounts and applications they are responsible for. As an attack surface, we need to think beyond traditional ports, protocols, and services found in information technology and consider the breadth and depth of identity, accounts, entitlements, and access. Identity attack vectors have a risk surface that is not only digital but also physical, and it can be compromised using old-school paper communications, such as letter from the postal service, or using social engineering via the telephone in a vishing (voice phishing) scam that leverages deep fake AI technology.