Chris Griffin, Penetration Testing Lead, says organizations miss physical security gaps like weak doors and tailgating during penetration tests. He describes a deepfake attack where someone leaves a voicemail impersonating an executive to request a badge, then collects it for site access.
Chris Griffin, Penetration Testing Lead. I'm excited to be here for the physical security aspect, something that we're really ramping up on as providing a service to show weaknesses in the physical perimeter, which is often neglected. People typically sign up for pentests and not realize weak doors, weak locks, tailgating, social engineering as a way to get in. And the aspect from the deepfake is what if you leave a voicemail for someone that runs the desk say, hey, create a badge for this person, keep it at the front desk, they'll come in and pick it up, and then they've got free rein access to the physical site.
