Help Desk Deepfakes: Why CISOs Must Rethink Verification
TechTarget, Friday, October 23rd, 2026
41% of organizations faced a deepfake audio social engineering attempt; help desks need verification that works however good the fake is.
Attackers increasingly use cloned voices or faces to talk help desks into password resets or MFA re-enrollment.
A Gartner survey of 297 CISOs found 41% of organizations experienced a deepfake audio social engineering incident in the past year, and in August 2026 voice-clone vishing hit help desks at firms including Citadel, Millennium and Point72.
Practitioners say password resets are the master key to the business and that deepfakes are often too good to detect by ear.
Instead of training staff to spot fakes, organizations should adopt verification processes such as calling back on trusted channels with added checks.