Identity Decoded | The Identity Security Podcast

Silverfort
  • 5.0 (2)
  • Technology

The only podcast where identity and security finally sit down together for a conversation that’s long overdue. Defining what Identity Security should look like is harder than it sounds, so let’s skip the buzzwords and vendor pitches and get straight to honest conversations with people like you doing the work. From the role identity plays in incident response to programmatically getting rid of AD tech debt or finally achieving least privilege, expect candid conversations about what's actually working, what's broken, and what's next. Tune in as leaders from every discipline unpack the tensions, tradeoffs, and lessons learned from building Identity Security programs in the real world. A Silverfort production hosted by Roy Akerman and Rob Ainscough, new episodes drop every two weeks.

Episodes

  1. What happens when a well-intentioned AI agent goes rogue ft. Susanne Senoff

    4d ago

    What happens when a well-intentioned AI agent goes rogue ft. Susanne Senoff

    Is “identity is the new perimeter” more of a marketing slogan than a real security strategy? In this episode, Roy Akerman and Rob Ainscough sit down with Susanne Senoff from Conga to discuss how AI agents are starting to behave more like threat actors, and why traditional ideas like “perimeter” and “zero trust” are becoming harder to define. Susanne shares firsthand experience, including an AI agent that wrote reverse proxy scripts and triggered a high-severity cloud alert, showing why security hygiene, understanding critical assets, and monitoring behavior matter more than static privileges or tier-zero boundaries. Together, they explore how IAM needs to evolve from slow administrative processes to real-time, context-aware security, and why CISOs need teams and partners that can keep up with an AI-driven world. Key Topics 1. Debunking "Identity is the new perimeter" 2.AI Agents as both business enablers and threat actors 3. Evolving IAM: From administrative controls to real-time, behavioral security 4. Shifting identity from static, admin-time governance to behavior-, intent-, and context-aware controls that operate at AI speed 🎧 Episode Highlights [01:53]: The moment when an AI agent behaves like a threat actor [03:14]: Why “identity is the new perimeter” falls short in an AI-driven world [07:13]: Why managing AI agents is like parenting a rule-bending 15-year-old [12:37]: Reinventing controls around agents [14:57]: Evolving IAM from static governance to real-time, intent-aware controls 🔑 Key Takeaways: Identity security must shift from static perimeters to behavior- and intent-aware controls. The old idea of “identity as the new perimeter” and flat concepts like users vs. non-humans can’t keep up with AI agents that behave like threat actors, move across cloud surfaces, and exploit basic privileges in unexpected ways. Modern IAM has to operate at runtime, continuously understanding assets, context, ownership, and behavior so security teams can make millisecond decisions about what to allow, challenge, or shut down. AI agents are forcing security teams to rethink risk, resilience, and incident response. As the time from vulnerability discovery to exploitation collapses from months to hours (and soon minutes), defenders can’t rely on ticket-driven processes or slow business validation to decide if something is “okay.” SOCs will increasingly need predefined, business-aware guardrails that justify blocking first and asking questions later on systems that truly matter, supported by AI-driven context, stronger hygiene, and a “minimum viable enterprise” mindset focused on critical processes, data, and apps rather than just tier-zero infrastructure. IAM is becoming a core part of the CISO’s security stack, not an adjacent function. Susanne shares that CISOs must own identity security architecture, embedding identity security engineers, redefining skills around AI, and partnering with vendors based on vision rather than feature checklists. The next generation of identity teams will be judged not just on joiner/mover/leaver workflows, but on their ability to run real-time, AI-assisted identity defenses that understand intent, adjust access dynamically, and help the business adopt AI safely instead of trying (and failing) to slow it down. 👤 Guest Spotlight:Susanne Senoff Susanne Senoff is the Chief Information Security Officer at Conga, where she leads the company’s cybersecurity strategy and helps drive secure innovation in an AI-driven world. With more than 20 years of experience in cybersecurity and risk management, she has held leadership roles at companies including McAfee, Microsoft, and Morgan Stanley. Susanne is known for her practical, people-first approach to security leadership and for helping organizations adapt to emerging AI and identity threats. Stay Connected: https://www.silverfort.com https://linkedin.com/in/rob-ainscough https://www.linkedin.com/in/roy-akerman https://www.linkedin.com/in/susanne-elizer-senoff-575ba96

    26 min
  2. Mythos, AI-powered attacks and the security reckoning ft. Sree Ashokkumar

    4d ago

    Mythos, AI-powered attacks and the security reckoning ft. Sree Ashokkumar

    Mythos changed the rules of security. Again. In this episode, Roy and Rob sit down with Sree Ashokkumar, VP of Cybersecurity at Interactive Brokers, to talk about what happens when frontier AI models like Mythos start exposing foundational weaknesses in identity and collapsing the security controls we've relied on for years. Mythos has quickly become one of the biggest conversations in cybersecurity, and for good reason. Sree shares what he's hearing from peers who've seen it in action: breaking out of hypervisors, chaining exploits in minutes, and forcing CISOs to rethink everything from vulnerability management to privileged access and runtime identity controls. We also get into why the future CISO will need to be more technical, how identity and security teams need to stop working in silos, and what enterprise defense actually looks like in 5 to 10 years. Rob gifts us another analogy (this time involving an identity drawbridge), and Roy pressure tests all of it. Key topics: Why the future favors a more technical CISO Why identity and security teams need to stop working in silos How the CISO role is evolving as AI embeds deeper into the enterprise The "identity drawbridge" strategy for building adaptive defenses Learn more about the impact of Mythos on Identity Security: https://www.silverfort.com/blog/what-cisos-and-iam-leaders-are-calibrating-after-mythos  Follow Silverfort on LinkedIn: https://www.linkedin.com/company/silverfort  Connect with Roy Akerman: https://www.linkedin.com/in/roy-akerman   Connect with Rob Ainscough: http://linkedin.com/in/rob-ainscough    🎧 Episode Highlights:  [3:19]: Why future CISOs must be deeply technical [07:36]: Why the Mythos AI model has cybersecurity leaders on edge [11:16]: The three pillars organizations need to defend against AI-powered attacks [17:00]: How identity security and lateral movement detection are evolving [35:37]: The “drawbridge” strategy for adaptive identity defense 🔑 Key Takeaways: Frontier AI models like Mythos are changing cybersecurity by accelerating exploitation, lateral movement, and privilege abuse faster than organizations can respond using traditional patching and response-led controls. Security needs to evolve from admin-time governance into real-time, runtime defense that continuously validates behavior, access, and trust. Security leaders need layered defenses, adaptive identity controls, network segmentation, and faster response mechanisms that can contain threats before they spread. Future identity programs may rely heavily on AI-driven detection, continuous PAM, and dynamic “drawbridge” style access controls that tighten automatically during suspicious activity. Technical leadership is essential for today’s CISOs.The era of of the “Board CISO” is over as organizations experience increasingly complex attack paths that force cybersecurity leaders to deeply understand systems, architecture, and product design. Now that AI lowers the barrier to building software and launching attacks, security teams will need to evolve faster, pressure test their own environments continuously, and rethink how identity and access management operate in an AI-native world. 👤 Guest Spotlight: Sreenarayan Ashokkumar is a cybersecurity leader with expertise building and leading security programs across industries including finance, technology, and media. Over the course of his career, he has held security leadership roles at organizations such as Warner Bros., Capital One, and Interactive Brokers, where he has focused on identity security, threat detection, cloud security, and large-scale cyber defense. His work centers on helping organizations adapt to rapidly evolving threats driven by AI, automation, and increasingly complex digital ecosystems. #Mythos #AISecurity #IdentitySecurity

    31 min
  • 2 Episodes

Ratings & Reviews

5
out of 5
2 Ratings

About

The only podcast where identity and security finally sit down together for a conversation that’s long overdue. Defining what Identity Security should look like is harder than it sounds, so let’s skip the buzzwords and vendor pitches and get straight to honest conversations with people like you doing the work. From the role identity plays in incident response to programmatically getting rid of AD tech debt or finally achieving least privilege, expect candid conversations about what's actually working, what's broken, and what's next. Tune in as leaders from every discipline unpack the tensions, tradeoffs, and lessons learned from building Identity Security programs in the real world. A Silverfort production hosted by Roy Akerman and Rob Ainscough, new episodes drop every two weeks.

Information