The Analyst Brief

In this episode, Simon Moffatt and David Mahdi explore the evolving landscape of AI, trust, and cybersecurity. They discuss how AI amplifies vulnerabilities, the importance of trust and integrity, and the future of agentic AI in security and identity management.

Keywords

AI, cybersecurity, trust, deepfakes, agentic AI, identity verification, zero trust, content verification, threat modeling, security architecture

Topics

AI amplification of vulnerabilities

Trust and trustworthiness in security

Deepfakes and content verification

Agentic AI and intent management

Dynamic risk and trust models

Chapters

00:00 Introduction and AI's Pervasiveness

00:56 AI in Daily Life and Tools Used

02:07 AI in Product Management and Content Creation

03:25 Deepfakes and Content Manipulation

05:14 Technical Solutions for Deepfake Verification

06:54 Voice Fakes and Generative Content

08:24 Human vs Machine Identity Trust

09:55 Future of Trust and Assurance in AI

12:05 Hardware Trustworthiness and Dynamic Trust Models

15:23 Evolving Identity and Trust Frameworks

20:09 AI-Driven Policy and Access Control

22:01 Agentic Ownership and Behavior

25:19 Explicit Goals and Intent in AI Agents

28:53 Risk, Scope, and Drift in AI Actions

33:20 Objective Clarity and Hierarchies of Intent

40:27 Information Flow and End-to-End Security

44:12 Coordination and Collective Defense

50:08 Dynamic Trust and Risk Management

53:46 Future-Proofing Security with AI

56:01 Conclusion and Future Outlook

This episode explores the latest trends in identity security, machine identity, and the strategic moves by major players like Cisco and Silverfort. We discuss acquisitions, the evolution of identity platforms, and the impact of AI on security decision-making.

Keywords

Identity Security, Machine Identity, Cisco, Silverfort, Asterix Security, AI, Cybersecurity, Mergers and Acquisitions, NHI, Identity Control Plane

Chapters

00:00 Introduction and Current Events in Identity Space

02:41 Cisco's Acquisition of Astrix Security

05:44 The Strategic Importance of Machine Identity

08:37 Market Dynamics and Competitive Landscape

11:48 The Future of Identity Management

14:36 The Role of AI in Identity Solutions

17:44 Challenges in the Current Market

20:54 The Impact of Vibe Coding on Development

23:36 Conclusion and Future Outlook

26:00 Navigating the Landscape of AI and Team Dynamics

27:38 The Evolution of Identity Security and Governance

29:21 Acquisitions in the Identity Security Space

31:48 The Role of AI in Identity Governance

36:54 The Future of Authorization and Decision-Making

44:33 Intent and Attribution in Cybersecurity

51:59 The Impact of AI Agents on Privacy and User Experience

RSAC 2026, Conference, AI trends, cybersecurity, identity security, investment, technology, innovation, compliance, vendor landscape, digital transformation

Summary

In this episode of the Analyst Brief Podcast, Simon Moffatt and David Mahdi discuss their experiences and insights from the RSAC 2026 Conference. They explore the overwhelming presence of AI in cybersecurity discussions, the evolving role of identity security, and the challenges of AI reliability. The conversation also touches on investment perspectives in the AI landscape and the future dynamics of cybersecurity companies, emphasizing the need for clarity and innovation in a rapidly changing environment.

Sound Bites

"AI is everywhere at RSA this year."

"Identity security is the control plane."

"We need to cut through the AI noise."

"AI is not all the same."

"The models hold the cards right now."

"AI will disrupt and add value."

Chapters

00:00 RSAC Conference Overview

02:57 AI Trends and Observations

06:02 The Role of Identity in Cybersecurity

09:11 Challenges with AI Reliability

12:01 Investment Perspectives on AI

15:10 Future of Cybersecurity Companies

18:06 The Impact of AI on Cybersecurity Dynamics

21:05 Concluding Thoughts on AI and Cybersecurity

The Future of Browsers, AI Agents, and Cybersecurity

Key Topics

• Insights from the recent FSI SAC, Gartner Identity Summit, and upcoming RSA Conference
• How consumer browsers equipped with AI agents are transforming user experiences
• The evolution of search engines into AI-powered agents and their implications
• Security challenges associated with agentic AI and fraud detection
• The shift from enterprise product-centric identity systems to platform-based identity fabrics
• The role of identity in B2C, B2E, and the impact of outside-in and inside-out models
• Future trends in digital identity, including multi-personas, personas, and the role of digital employees and agents
• The influence of consumer tech innovation on enterprise security and identity strategies
• Practical considerations for securing agentic AI and managing associated cyber risks

Keywords

identity, cybersecurity, acquisitions, resilience, AI, identity providers, OpenClaw, regulatory implications, consumer experience, employee experience

Summary

In this episode of the Analyst Brief podcast, Simon Moffatt and David Mahdi discuss the latest trends in identity management and cybersecurity, focusing on recent acquisitions, the importance of cyber resilience, and the convergence of identity and cybersecurity. They explore the implications of identity providers, regulatory challenges, and the impact of AI innovations, particularly the new tool OpenClaw. The conversation emphasizes the need for organizations to prioritize identity resilience and security as they navigate the evolving digital landscape.

Takeaways

• The identity space is experiencing significant acquisition activity.
• Cyber resilience is becoming increasingly important in identity management.
• Identity is more than just the IDP; it plays a critical role in security.
• If an IDP is unavailable, it can severely impact business operations.
• The convergence of identity and cybersecurity is a growing trend.
• Organizations need to focus on identity resilience to ensure service availability.
• Regulatory implications are becoming more significant in the identity space.
• AI innovations are rapidly changing the landscape of identity management.
• OpenClaw represents a new approach to productivity but raises security concerns.
• The future of identity management will require a balance between innovation and security.

Chapters

00:00 Introduction and Current Events

01:22 Acquisitions in the Cybersecurity Space

05:35 The Importance of Identity Resilience

11:24 Convergence of Identity and Cybersecurity

18:10 Regulatory Implications and Future Outlook

22:52 Navigating Identity Lifecycle and Governance

26:37 The Role of AI in Identity Management

29:56 Exploring OpenClaw and Its Implications

42:19 The Future of AI and Security Challenges

Keywords

identity management, cybersecurity, acquisitions, AI, conferences, CrowdStrike, PAM, market trends, technology, security, Delinea, StrongDM

Summary

In this episode of the Analyst Brief Podcast, Simon Moffatt and David Mahdi discuss the latest trends in identity management and cybersecurity, including upcoming conferences, recent acquisitions, and the evolving role of AI in the industry. They explore the challenges organizations face with technical debt and the need for better resolution in identity management. The conversation also touches on CrowdStrike's recent developments and the importance of ecosystem partnerships in navigating the complex landscape of identity management.

Takeaways

• RSA Conference is a key event for industry professionals.
• Delinia's acquisition of Strong DM highlights market consolidation.
• Identity management is increasingly recognized as a control plane.
• AI is becoming integral to identity management solutions.
• Technical debt poses significant challenges for organizations.
• The identity management landscape is evolving rapidly.
• Ecosystem partnerships are crucial for smaller vendors.
• Vendors need to clearly differentiate their offerings.
• The future of identity management will involve more dynamic solutions.

Chapters

00:00 Introduction

02:54 Upcoming Conferences and Industry Events

05:49 Market Changes: Acquisitions and Mergers

11:43 The Evolution of Identity Management

17:40 The Future of Identity Control Plane

25:07 Leveraging Identity Solutions

26:22 The Role of Identity in Business Agility

28:09 Understanding Information Asymmetry in Business

29:30 The Need for Speed in Identity Management

31:51 Conceptualizing Identity Management

33:16 Addressing Technical Debt in IAM

35:21 AI's Role in Modernizing Identity Infrastructure

38:09 Vendor Narratives and Market Confusion

41:11 Ecosystem Partnerships in Identity Management

43:39 CrowdStrike's New Partnership with Natoma

Keywords

identity, cybersecurity, AI, Gartner, conferences, funding, innovation, resilience, OWASP, predictions

Summary

In this episode of the Analyst Brief Podcast, Simon Moffatt and David Mahdi discuss the latest trends in identity and cybersecurity, reflecting on recent conferences, particularly the Gartner Identity Conference. They explore the evolving role of identity in organizations, the impact of AI, and the importance of resilience in supply chains. The conversation also touches on funding dynamics in the identity space, the challenges of innovation versus reliability, and the newly released OWASP Top 10 for Agentic AI. As they look ahead to 2026, they share predictions about the future of identity and the cybersecurity landscape.

Takeaways

Identity is becoming increasingly central to cybersecurity strategies.

The Gartner Identity Conference highlighted key trends in identity management.

AI is reshaping the identity landscape but hasn't introduced new business models yet.

Organizations need to focus on resilience in their identity systems.

Funding in the identity space is shifting, with significant investments being made.

Innovation in identity solutions must balance reliability and customer needs.

The complexity of supply chains poses challenges for identity management.

OWASP's Top 10 for Agentic AI emphasizes the importance of identity in AI security.

2025 has been a pivotal year for identity, with increased attention and funding.

Organizations should start small and automate basic identity management tasks.

Sound bites

"Identity is at the core."

"Identity is foundational."

"Phishing isn't fixed."

Chapters

00:00 Introduction and Festive Greetings

02:04 Conferences and Events: Insights from Black Hat Europe

04:38 Gartner Identity and Access Management Conference Overview

09:32 Emerging Trends in Identity Management

12:47 Identity as Core Infrastructure

17:48 The Future of Identity in Cybersecurity

23:39 Funding and Market Trends in Identity Solutions

28:08 Navigating Customer Satisfaction and Market Dynamics

29:32 The Shift from Hypergrowth to Profitability

31:53 Investment Strategies and Market Positioning

33:37 Innovation vs. Reliability in Established Companies

36:57 The Role of Innovation Across Business Functions

38:44 The Importance of Identity in Cybersecurity

40:03 Supply Chain Vulnerabilities and Interdependencies

44:26 Resilience and Recovery in Cybersecurity

48:07 The Need for Investment in Incident Response

49:31 Privacy Challenges in the Digital Age

51:30 OWASP Top 10 for Agentic AI

55:37 Predictions for 2026: AI and Cybersecurity Trends

Summary

In this episode of the Analyst Brief podcast, Simon Moffatt and David Mahdi discuss the latest trends in identity security, including recent funding rounds and acquisitions. They explore the growing importance of identity governance, the intersection of security and identity management, and the role of trust in the age of AI. The conversation also touches on the significance of ITDR and the implications of recent acquisitions for the market. The hosts reflect on the future of identity security and the need for continuous innovation in this evolving landscape.

Chapters

00:00 Introduction to the Analyst Brief Podcast

03:03 Autumn Conference Season Insights

06:05 Funding and Acquisitions in Identity Governance

08:59 The Growing Complexity of Identity Governance

12:01 The Intersection of Security and Identity

14:49 The Future of Cybersecurity and Identity Integration

17:42 Understanding the Broader Ecosystem of Cybersecurity

21:04 The Importance of Protecting All Identities

23:53 First Principles in Cybersecurity Strategy

29:10 Navigating Resilience and Availability in Security

29:56 Funding Trends in Identity Security

31:45 The Impact of Acquisitions on Identity Security

32:13 Twilio's Acquisition of Stitch: A New Era in Identity

36:33 Building Trust in the Age of AI

39:21 Zero Trust: Establishing and Maintaining Trust

44:14 Ping Identity's Acquisition of Keyless: Innovations in Biometric Authentication

55:11 JumpCloud Acquires Breeze Security: Enhancing ITDR Solutions

59:54 Improvata's Strategic Moves in Identity Security

Keywords

identity security, funding, acquisitions, AI, trust, governance, ITDR, cybersecurity, authentication, market trends

Keywords

AWS outage, digital dependency, business continuity, FIDO, authentication, passkeys, digital certificates, threat informed defense, false positives, cyber resilience

Summary

In this episode of the Analyst Brief Podcast, Simon Moffatt and David Mahdi discuss the recent AWS outage and its implications on digital dependency and business continuity. They explore the importance of disaster recovery plans and the evolving landscape of authentication technologies, particularly focusing on the FIDO Authenticate Conference. The conversation delves into the lifecycle of passkeys and digital certificates, emphasizing the need for threat-informed defense strategies and the challenges of managing false positives in security. The episode concludes with a call for better integration of systems and shared intelligence across the industry.

Chapters

00:00 Introduction and Global Outage Discussion

03:01 The Impact of Digital Dependency

06:00 Business Continuity and Disaster Recovery

09:10 FIDO Authenticate Conference Overview

16:09 Evolution of Authentication Technologies

21:45 The Lifecycle of Passkeys and Digital Certificates

29:59 Threat Informed Defense and False Positives

39:55 Conclusion and Future Considerations

Keywords

PAM, IGA, CyberArk, Palo Alto, identity security, AI, machine identity, cybersecurity, information flows, behavioral analysis

Summary

In this episode of the Analyst Brief Podcast, Simon Moffatt and David Mahdi discuss the significant changes in the cybersecurity landscape, particularly focusing on Privileged Access Management (PAM) and Identity Governance and Administration (IGA). They explore the recent acquisition of CyberArk by Palo Alto, the evolution of identity security, and the convergence of various identity management solutions.

The conversation highlights the importance of information flows, and the need for a mindset shift in the industry to effectively address identity security challenges.

Takeaways

• The cybersecurity landscape is rapidly changing due to AI.
• PAM and IGA are evolving but remain siloed.
• The acquisition of CyberArk by Palo Alto signifies a shift in identity security.
• Organizations struggle with integrating disparate identity technologies.
• Behavioral analysis is crucial for identifying security threats.
• AI will play a significant role in optimizing identity security.
• Defensive acquisitions are common in the cybersecurity industry.
• The future of identity security relies on understanding information flows.

Chapters

00:00 Welcome Back and Industry Changes

02:01 The Evolution of Privileged Access Management (PAM)

10:41 The Convergence of Cybersecurity and Identity

16:13 The Future of Identity Management Platforms

24:23 Understanding Information Flows in Cybersecurity

28:12 The Role of AI in Identity Management

33:42 Navigating Mergers and Acquisitions in Tech

39:50 The Future of Identity Security and AI Integration

Summary

This episode explores the importance of standards, the role of identity in cybersecurity, and the challenges faced by organizations in managing identity security effectively. The conversation highlights the need for innovation and collaboration in the identity space, as well as the critical nature of identity being an attack surface - especially vendors in the JML firing line. How can behaviour monitoring help?

Keywords

identity security, funding news, leadership changes, market trends, cybersecurity, access management, identity governance, AI in security, standards in identity, identity as a service, identity management, security controls, behavioral analysis, customer experience, identity standards, identity security, digital identity, identity governance, cybersecurity, identity threats

Chapters

00:00 Introduction

03:12 Market News: Funding and Innovations

12:37 Leadership Changes in Identity Security

14:04 The Evolution of Identity Security

24:11 Identity as a Strategic Business Element

25:57 The Security Landscape and Vendor Commitments

28:00 Evolving Security Controls in Identity Management

30:11 Behavioral Analysis: The Missing Piece

32:00 The Strategic Importance of Identity Management

34:03 Identity as a Brand and Customer Experience

35:58 The Maturity of Identity Solutions

37:56 Decoupling User Experience from Identity Security

39:49 Complexity in Identity Standards and Security

44:07 Emerging Threats and the Need for Standards

Summary

In this episode of the Week in Identity podcast, Simon and David discuss the latest trends and developments in identity security, including market activity, funding rounds, and significant acquisitions. They delve into the importance of NIST guidelines, the rise of non-human identity (NHI), and the implications of recent acquisitions by MasterCard and Salesforce. The conversation highlights the evolving landscape of identity management and the critical need for organizations to adapt to new challenges in cybersecurity.

Chapters

00:00 Introduction to the Week in Identity Podcast

03:52 NIST Guidelines and Identity Assurance

06:30 Aembit Funding Rounds and Non-Human Identity

13:42 Acquisitions in Identity: IndyKite and 3Edges

20:17 MasterCard and Recorded Future

26:39 Salesforce and Own Data

Simon and David convene for a special episode to discuss the ongoing global IT outages caused by a Crowdstrike update. Note this was released Friday 19th July 9am PST / 5pm BST

Summary

In this episode, Simon and David discuss recent acquisitions in the identity and access management space, including Palo Alto's acquisition of QRadar, Akamai's acquisition of NoName, and CyberArk's acquisition of Venafi. They explore the importance of resilience in IAM infrastructure and the growing need for managing machine identities and workloads. The conversation highlights the challenges and opportunities in securing non-human identities and the role of PAM in addressing these issues. They also touch on the dark web and identity-based threats.

Keywords

identity and access management, acquisitions, resilience, IAM infrastructure, machine identities, workloads, PAM, non-human identities, dark web, identity-based threats

Takeaways

• Recent acquisitions in the IAM space include Palo Alto's acquisition of Q Radar, Akamai's acquisition of No Name Security, and CyberArk's acquisition of Venafi.
• Managing machine identities and workloads is a growing challenge in the IAM space.
• PAM plays a crucial role in securing non-human identities.

Chapters

00:00 Introduction and Overview

02:40 Recent Acquisitions in the IAM Space

06:02 The Importance of Resilience in IAM Infrastructure

09:12 Managing Machine Identities and Workloads

15:23 The Role of PAM in Securing Non-Human Identities

26:14 Upcoming Presentation at Identiverse

Summary

In this episode, Simon and David discuss the convergence of identity and cybersecurity, particularly in the context of cloud adoption. They explore the challenges and opportunities that arise from this convergence and the impact on organizations of different sizes. They also touch on the confusion caused by the abundance of acronyms in the industry and the need for clarity and standardization. Overall, they emphasize the importance of protecting identity components and the critical role of identity in security. The conversation explores the challenges and opportunities in the identity and access management (IAM) space, with a focus on the importance of data management and the need for effective discovery and remediation processes. The fragmentation of identity systems and the lack of visibility into identities and their interactions are identified as key issues. The acquisition of Q Radar by Palo Alto is discussed as a potential game-changer in the IAM space. The conversation concludes with the recognition that while automation and AI have their place, human involvement is still crucial for effective remediation.

Keywords

identity, cybersecurity, convergence, cloud, challenges, opportunities, acronyms, standardization, protection, security, identity and access management, IAM, data management, discovery, remediation, fragmentation, visibility, Q Radar, Palo Alto, automation, AI, human involvement

Takeaways

Identity and cybersecurity are converging, particularly in the context of cloud adoption.

Organizations of different sizes face different challenges and opportunities in managing identity and security.

The abundance of acronyms in the industry can be confusing, and there is a need for clarity and standardization.

Protecting identity components is crucial, as identity often plays a central role in security breaches. Effective data management is crucial in the identity and access management space.

Fragmentation of identity systems and lack of visibility into identities and their interactions are key challenges.

The acquisition of Q Radar by Palo Alto has the potential to impact the IAM space.

While automation and AI have their place, human involvement is still necessary for effective remediation.

Chapters

00:00 Introduction and Post-RSA Recovery

01:23 Unpacking the Convergence of Identity and Cybersecurity

07:13 Lessons from the Transition from Horses to Cars

09:08 The Confusion of Acronyms and the Need for Clarity

13:25 The Hype Cycle and the Trajectory of New Technologies

15:16 The Impact of Cloud Adoption on Identity and Security

23:21 The Transient Tilt in the Cloud and the Importance of Protecting Identity Components

24:13 The Importance of Data Management in IAM

27:38 Challenges of Fragmentation and Lack of Visibility

30:53 The Potential Impact of the Q Radar Acquisition

34:44 The Role of Automation and Human Involvement in Remediation

Summary

In this episode, Simon and David discuss their experiences at the RSA Conference 2024 and highlight the key themes and trends in the identity and access management (IAM) space. They emphasize the growing importance of identity in the security landscape and the increasing integration of identity into RSA. They also discuss the impact of AI and Gen AI on IAM, the need for better discovery and visibility in identity systems, and the challenges of transitioning from legacy technology to new, intelligent systems. They conclude by highlighting the importance of preparing data for the Gen AI world and the need for organizations to adapt and embrace new technologies in order to stay competitive.

Keywords

RSA Conference, RSAC2024, identity and access management, IAM, security, AI, Gen AI, discovery, visibility, legacy technology, data preparation, competitive advantage

Takeaways

Identity is becoming increasingly important in the security landscape, and RSA is a key event for identity professionals.

The integration of identity into themes and topics at RSAC2024 is a reflection of the growing significance of identity in the industry.

AI and Gen AI are driving the need for more intelligent identity systems and the transition from legacy technology.

Discovery and visibility are crucial in identity systems, and organizations need to break down silos and integrate their identity infrastructure.

Preparing data for the Gen AI world is essential for organizations to stay competitive and take advantage of new technologies.

Chapters

00:00 Introduction and Overview of RSA Conference

13:02 The Growing Importance of Identity in the Security Landscape

21:03 Challenges of Transitioning from Legacy Technology to New, Intelligent Systems

25:01 The Impact of AI and Gen AI on IAM

31:05 Preparing Data for the Gen AI World

33:30 Preview of Next Episode on Fraud and Cloud

After a small spring break, Simon and David return with a special episode focused on the convergence of identity and access management and fraud. Why the convergence? How to measure success? What are the three 'V's' as they relate to fraud? How should people and process adapt to keep up with technology changes? And how to thwart the asymmetric advantage of the fraudster?

This week Simon and David have a mini-deep dive on data security. Data storage locations are changing. Organisations are harvesting PII, transaction and payment data continually being collected. And what about disinformation and misinformation? What role does identity have here? What about data and deepfakes for onboarding and biometrics? What does data access governance meanin 2024? Is data integrity protection the biggest issue within cyber today? How should we handle fine grained and contextual access and how do the CISO and Chief Data Officer relate?

This week Simon and David review the recent RSA Conference that occurred at the end of April over in San Francisco. From the generic meta-patterns at the conference covering themes such as collaboration, standards, multi-cloud and technology integration, through to more IAM focused conversations covering MFA, passkeys and authentication attacks. Are passkeys now here to stay? What will help adoption? Will attacks on passkeys start to increase along with usage rates? Will attacks against existing MFA forms including SIM swap, MFA fatigue and social engineering be a compelling event to improve adoption?