Urgent.News

What's breaking now, across thousands of outlets.

Tech

Sumsub Adds Live Identity Checks to High-Risk Employee Account Actions

Sumsub said in London on September 15 that it has launched Workforce Verification, a service designed to confirm an employee’s identity before high-risk account actions are approved. The system can require a live identity and biometric check during password resets, privilege changes and suspicious l

Sumsub, a company specializing in identity and business verification, has introduced a new service called Workforce Verification. This service is designed to confirm the identity of employees before allowing them to make high-risk changes to their accounts, such as resetting passwords, altering privileges, or attempting logins from suspicious locations.

The system integrates seamlessly with existing identity and access management (IAM) and human resources platforms, allowing it to verify new hires and contractors during the onboarding process.

Sumsub's technology operates as an additional layer of security on top of existing IT infrastructure. When a user attempts to recover their password, gain additional account privileges, or log in from an unusual location, the platform triggers an extra verification process. This process includes biometric liveness testing and checks for passive risk indicators.

Andrew Novoselsky, Sumsub's chief product officer, explained that while IAM systems manage access, they only confirm that a user possesses a valid credential, not their true identity. This means that even if someone has a stolen or manipulated password, they can still gain access to sensitive systems. Sumsub's service addresses this issue by verifying the person behind the credentials.

The service is not limited to onboarding new employees. It can also be used to screen prospective employees and contractors before they receive access to corporate systems. This proactive approach is intended to reduce the risk of employees using false or manipulated identities.

Sumsub claims that its deepfake-detection technology can detect manipulated images with a high degree of accuracy, up to 99.98%. The system is supported by a network of over 1.5 billion enriched identity records and combines automated background screening with customizable document checks. These capabilities were provided by Sumsub and were not independently verified.

In today's digital landscape, businesses face an increasing number of threats, including stolen credentials, AI-generated impersonation, and social engineering attacks. Sumsub's Workforce Verification service is designed to help companies mitigate these risks by providing an additional layer of identity protection at critical moments.

Written by urgent.news from Korea IT Times's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Read the original at koreaittimes.com →

More in Tech

#M for Midhun, M for Macie: Exploring Amazon Macie 🔐☁️

Introduction Cloud storage makes it easy for organizations, colleges, and students to store large amounts of data. However, storing data in the cloud also creates an important question: How do we know…

  • Amazon Macie discovers sensitive data in S3 using ML and pattern matching
  • Identifies PII, financial info, credentials with AWS or custom identifiers
  • Provides automated discovery and discovery jobs for security monitoring

Yokhash Meets VPC: Exploring Amazon Virtual Private Cloud ☁️

📝 Introduction What is the AWS service? Amazon VPC (Virtual Private Cloud) is a networking service that lets you create your own logically isolated section of the AWS cloud.

  • Amazon Virtual Private Cloud (VPC) enables isolated AWS cloud sections.
  • VPC launched in 2009 to improve secure, enterprise-grade architectures.
  • VPC provides control over IP range, subnets, route tables, and gateways.

Deleting a secret from your Docker image doesn't delete it from your build history

An autonomous hacking agent found a live GitHub admin token in Baseten's infrastructure by pulling a public Docker image and reading its build history.

  • Secret token persisted in Docker image build history despite removal
  • GitHub admin token retained internal repository permissions from March 2023 to July 2026
  • Build history contains plaintext token, posing significant threat to security

More from Wednesday 16 September →