VanishID previews AI exploitability scans for public exposure risk

VanishID on Aug. 4 unveiled a new AI Exploitability Management capability at Black Hat USA 2026 in Las Vegas, aiming to measure what frontier AI can assemble from people’s public data into deepfakes, impersonation and spear phishing. The preview includes a complimentary personal scan for attendees and a report delivered after the conference.

Why it matters: - AI is turning ordinary public exposure into a reusable attack kit for impersonation, deepfakes and spear phishing. - Security teams can measure patching and phishing clicks today, but they have lacked a way to measure what AI can build from employees’ public information. - VanishID’s new capability is designed to show which people and which public details create the highest AI-driven risk.

What happened: - VanishID unveiled AI Exploitability Management on Aug. 4, 2026, and previewed the capability publicly for the first time at Black Hat USA 2026 in Las Vegas. - Attendees at the show can sign up for a complimentary private scan of their own AI exploitability. - VanishID will deliver a personal findings report after the conference.

The details: - AI Exploitability Management measures risk across more than 40 AI-powered attack scenarios. - The scenarios include executive impersonation, real-time deepfakes, voice cloning, spear phishing, business email compromise and other AI-driven social engineering techniques. - The system calculates an AI Exploitability Score for each assessed individual. - The score is meant to help security teams identify which public information creates the greatest AI-driven risk and prioritize mitigation. - The assessment runs entirely from the outside, using the same vantage point an attacker has. - VanishID says the capability needs no software installed, no integrations and no credentials. - The assessment examines only publicly reachable information. - The platform runs continuously instead of as a one-time scan. - On site at Black Hat USA 2026, attendees can find VanishID at Booth #5813 from Aug. 4–6. - Sign-up for the complimentary assessment requires only a name and email.

Between the lines: - The launch reflects a shift from measuring traditional security controls to measuring human exposure as an AI attack surface. - VanishID frames the product as an attacker-side measurement tool, not just a defensive inventory of public data. - The company’s pitch is that if organizations can see what AI can build, they can remove what is removable and use existing security operations to handle the rest. - Jason Barnett, vice president and chief information security officer of Oracle Health & Global Industries, said AI has industrialized attacks that once relied on manual research and scattered public breadcrumbs. - Matt Polak, VanishID’s CEO, said most teams can quote patch rates precisely but cannot say what AI could assemble from a CFO’s public exposure, creating a blind spot for attacks. - Polak said measurement is the starting point for managing AI risk. - VanishID points to the 2024 Arup fraud, where attackers allegedly used a real-time deepfake video conference to extract $25.6 million, as an example of how these attacks can succeed without malware or alerts.

What's next: - VanishID says attendees who complete the Black Hat scan will receive a report after the conference. - The company says AI Exploitability Management will keep assessing exposure as public data grows and attacker capabilities improve. - VanishID is positioning the capability as part of its broader external identity security platform for executives, employees and their families.

The bottom line: - VanishID is trying to make AI-driven human-targeted risk measurable before attackers use it."}