see 2021
Session / Identity for Security

Recent Identity Threats and Trends: Lessons to improve Identity Security

Tuesday, June 22
7:30am - 7:55am MDT

The year 2020 will be remembered, among other things, for a large number of attacks, breaches, and security compromises that affected organizations of all types and sizes. What do  MFA-stealing mobile malware, monster-in-the-browser and extension-based attacks, ransomware campaigns, consent and application-based phishing, and finally allegedly nation-state supply-chain compromises have in common? Well, instances of all those happened in 2020, but more importantly, they involve identities, compromises, or bypasses to identity security measures.
In this session we will review, through a set of selected real-world examples, some of the recent trends in identity-related threats and operations, aiming to conclude with a series of lessons that can be applied to improve identity security strategies and better prepare for the future.