09/08/2026
You don’t have to be famous to be a target.
Attackers are often targeting the access you can provide: or the person you can reach.
That could mean approving a payment, resetting a password, accessing sensitive information, or communicating with someone who has that authority. For professional-services firms, the most dangerous requests often look completely normal: a vendor invoice, banking-change request, password reset, or urgent message from a colleague.
A few practical habits can help:
• Slow down when a request involves urgency, money, credentials, or sensitive information.
• Verify important requests through a different channel, using a known phone number: not contact information in the message.
• Use strong MFA, such as passkeys, security keys, or an authenticator app instead of SMS alone.
• Look beyond MFA with Identity Threat Detection and Response (ITDR) to identify suspicious identity activity.
Cybersecurity is a business continuity issue: not just an IT issue.
Read Tim Weidman’s new LinkedIn article for the full perspective: https://www.linkedin.com/pulse/you-dont-have-famous-target-tim-weidman-acfne
If you’re unsure whether your organization is protected against these attacks, we’re happy to help you think through the risks.