Securing the service desk: Why social engineering attacks keep succeeding

Attackers continue to compromise corporate systems by targeting service desks. Scattered Spider hit UK retailers Marks & Spencer, Co-op, and Harrods in 2025 by impersonating employees. Carnival Corporation suffered a similar breach. The FBI warned about Silent Ransom Group posing as IT support. Human vulnerability makes service desks an easier entry point than technology.