Morningstar SlashID Launches Mutual TOTP to Combat Social Engineering Attacks
Article Content
- •Mutual TOTP provides real-time, bidirectional identity verification without biometrics.
- •Social engineering was responsible for 36% of enterprise breaches last year.
- •The solution is designed for various interactions, enhancing security against impersonation.
On April 21, 2026, SlashID announced the launch of Mutual Time-based One-time Password (TOTP), a cryptographic verification solution designed to prevent impersonation attacks, particularly through social engineering methods like vishing and deepfake impersonation. This new capability allows for bidirectional identity verification in real-time, addressing the significant trust gap that exists in traditional multi-factor authentication (MFA) systems. Social engineering accounted for 36% of all enterprise breaches last year, with vishing alone representing 11% of infection investigations. The Mutual TOTP solution operates without the need for biometrics, hardware tokens, or face scanning, making it less invasive and more practical for widespread use. It significantly reduces onboarding friction and privacy concerns associated with traditional identity verification methods. The solution is designed for various interactions, including employee-to-employee calls and vendor onboarding, and can be deployed quickly and cost-effectively. This innovation aims to enhance security in environments where traditional defenses have proven inadequate against sophisticated impersonation tactics.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…
Critical Zero-Day Exploit Found in BeyondTrust Remote Support BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE since August 2026. This flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring…