A new report from HYPR, summarized by Help Net Security, finds that identity-based hiring fraud is slipping past standard security controls. According to the report, 98% of fraudulent hires have company credentials by the time they are discovered, suggesting that attackers are increasingly obtaining access through the front door rather than through technical exploits.
The gap lies in the 90-day window between hiring and onboarding. During that period, organizations may issue credentials before fully verifying a new employee’s identity. The report warns that this creates a significant blind spot in enterprise identity security, especially as remote interviews become more common.
As the source puts it, adversaries no longer need to breach a network when they can pass a remote interview and receive authentic credentials. With only one source available, this article reflects that single report's framing and does not compare it with other findings.