Speaker: Bert Skorupski

Identity has become the main way into the enterprise. Most attacks today use no malware at all: attackers simply log in with valid credentials, abuse excessive privileges and move along access paths nobody knew existed. AI makes this worse in two ways. Attackers use it to shrink the time between first access and impact from days to minutes. At the same time, enterprises are adding non-human identities faster than they can control them: service accounts, workloads, API keys and, now, AI agents, copilots and MCP servers acting on behalf of users.
 
The result is a large blind spot. Security teams often cannot answer basic questions. Which identities have privileged access, directly or through nested groups and del ...