The term metaverse has become a buzzword in the last two years, getting even more popular after Facebook announced its rebranding as Meta, which signaled the company’s embrace of future technology rooted in the metaverse. Broadly speaking, metaverse refers to a network of 3-D virtual environments where humans are represented by avatars used to communicate, travel, and make transactions. At the time of this writing, discussions continue about what does and does not constitute the metaverse while technologies such as cryptocurrency and non-fungible tokens (NFTs) have become staples of it. Moreover, it is widely agreed that the metaverse is part of the latest iteration of the Internet—namely, Web 3.0, or Web3.

As new technologies enter the market, the threat landscape evolves along the way. Experts argue about the challenges that the metaverse creates in the form of security and privacy that the public and organizations must understand. Challenges such as fraud and credential theft have emerged as the biggest concerns publications across the world highlight. Thus, the chief information security officers (CISOs) at organizations that are looking to deploy a metaverse platform must adopt robust solutions that will ensure security is embedded throughout the entire metaverse platform during its development to boost cyber-resilience.