New Speed, Same Tricks: How to Defend Against AI-Driven Social Engineering

6,000 Social Engineering Attacks Reveal What Actually Stops Account Takeovers

Sign Up Now
Join the Webinar
loader
About this webinar

AI has changed the threat landscape, but maybe not in the way you think. Attackers are using AI to run their tried-and-true scams, just a whole lot faster. In this webinar, Katie Nickels, Director of Okta Threat Intelligence, takes you inside voice phishing operations and shares how to protect against them based on new research analyzing 6,000 real-world social engineering attacks.

The hard truth is that all MFA is not created equal, and the small details of how you implement it make all the difference when it comes to attackers successfully taking over an account or being stopped by your controls. We’ll share how to implement "security invariants"—machine-enforceable policies—to systematically lock down your attack surface without adding friction for users.

Key Takeaways

  • AI hasn't changed the playbook, just the pace: Okta Threat Intelligence regularly sees new vibe-coded phishing kits and AI-enabled attackers. The same old techniques are getting faster and more scalable as cybercriminals turn to AI.
  • Leaving weak factors open a dangerous gap: Requiring phishing-resistant factors but not disabling weaker factors leaves organizations open to MFA downgrade attacks, in which determined attackers socially engineer users into switching to a weaker, phishable factor instead.
  • Strict enforcement closes the door for good: You can’t train users to outsmart every scam, but you can remove the choice. Requiring phishing-resistant authentication across every sign-in and account recovery flow takes protection to nearly 100%.

Join us to see the actual lures attackers are using, the data behind what stops them, and a concrete path to closing the gaps around phishing-resistant MFA implementation that attackers love to exploit.