From Fragmented Identity to Verified Trust: Protecting Against Organised Attacks - Ping Identity

‍

Overview

In this CISO Inspired Summit masterclass, Andrew Potter, Senior Principal Sales Engineer at Ping Identity, explores how organised attackers are exploiting every gap in fragmented identity stacks, with multiple IdPs, inconsistent MFA, brittle recovery flows and unmanaged third-party access, while the business demands faster transformation, hybrid work and AI-driven innovation.

Andrew opens with examples of AI-enabled fraud, including a deepfake romance scam using the likeness of Brad Pitt that cost a victim £700,000, and a Hong Kong worker asked by a deepfaked "CFO" to transfer $25 million. He then sets out how to move from patchwork identity to Verified Trust: a unified, risk-aware approach that continuously validates every human and non-human identity across onboarding, access and the help desk, without ripping and replacing existing systems such as Microsoft Entra.

Key takeaways

  • According to the US Department of Justice, more than 300 Fortune 500 companies were found to have hired North Korean operatives, so verifying who you hire matters.
  • 83% of organisations have experienced an account takeover attack.
  • Over 100 organisations have been attacked through the help desk, the tactic associated with Scattered Spider, making recovery flows a critical weak link.
  • Identity verification and risk signals (such as PingOne Verify and PingOne Protect) can be layered across existing IdPs.
  • Customer outcomes cited include an 80% reduction in MFA prompts and a 30% reduction in help desk load.