#vishing

ASOS and Dexcom both traced October breaches to people being talked into access, and India will show a network-asserted caller name on calls from November 1. None of it changes the core problem: an MFA reset issues a new credential, so the help desk decides who gets one. How to verify callers with proof instead of knowledge, and why the passkey migration will test it.

India's Department of Telecommunications has ordered all access providers to show callers' subscriber-registered names on incoming calls from November 1, 2026, a network-level identity signal aimed at spam and fraud calls.

Glucose monitor maker Dexcom says targeted voice phishing gave an unauthorized party access to limited information in certain internal documents. It reports no impact on products or operations and has brought in an outside forensics firm.