imper

Last updated: Sep 9, 2026 Update: September 9, 2026 Since this article was first published on September 3, the status of the incident has changed materially. On September 4, IDScan.net acknowledged a security incident. The company said an unauthorized thi

TL;DR: The 10-Week Media Timeline Updated August 20, 2026. In ten weeks, North Korean IT worker activity moved from specialist cybersecurity reporting into government warnings, major investigations and national television. The coverage also changed how th

On July 31, 2026, eleven governments issued the same warning on the same day. The United States, through the State Department and the FBI. Japan, through five ministries and agencies. The Republic of Korea. Australia. Canada. France. Germany. Italy. The N

The call was clean. The caller identified as an IT employee locked out of their account, knew the employee ID, spoke without an accent, and gave the help desk agent no reason to hesitate. The agent reported nothing suspicious. Underneath the call, five si

TL;DR/ Executive Summary ThreatCoordinated vishing attacks targeting help desk password resetsCustomer profileRetail enterprise, approximately 16,000 employees, spanning a large field workforce and corporate knowledge workersDetection windowOne month of a

Somewhere between the interview loop and the help desk queue sits a specific event: a person inside a trusted workflow who is not who the organization believes them to be. For years the event had no name of its own. It lived in incident reports and hallwa

Last week imper.ai was at the Gartner Security and Risk Management Summit in National Harbor. A lot of conversations, a few themes that kept repeating. The one that came up most: organizations that thought they had the identity problem covered are realizi

We are proud to announce that imper.ai has been recognized in Redpoint Ventures' 2026 InfraRed 100, an annual list recognizing private companies building the foundational infrastructure of the AI era. Redpoint has backed generational infrastructure compan

When CISOs think about the cost of a successful impersonation attack, the instinct is to count the money. A wire transfer that got approved. A vendor change that should not have been processed. That instinct is wrong for the dominant impersonation vector

When security leaders map their attack surface, the hiring pipeline rarely makes the list. It should.Remote hiring has changed who organizations let inside, and how. Trust decisions now happen across screens, video calls, and digital artifacts. Attackers