IAM Stacks Under Attack! WhyAuthentication is Key to Cyber-Resiliency
summary
IBM finds 300 days to detect an identity breach and demonstrations show attackers using phish kits that plug into Telegram + OTP bots to capture credentials and robocall OTPs, with kits sold on the dark web for roughly $22,000+. Real incidents (MGM, Scattered Spider, ForgeRock exploits) combine LinkedIn reconnaissance, CVEs and dark‑web tools. Effective defenses are concrete: liveness and device telemetry at onboarding, passkeys and behavior monitoring for ongoing access, and close post‑reset surveillance of accounts.
AI-written summary · about
chapters (15)
- 0:00Introduction and welcome
- 1:28Speakers and session overview
- 2:13Cyber resilience and identity threats
- 3:39MGM attack breakdown
- 6:51Live phishing kit demonstration
- 10:22Cyber resilience and authentication focus
- 12:49Root causes of identity vulnerabilities
- 14:11Adversary mindset and collaboration
- 15:37Identity-centric security approach
- 18:06Onboarding and registration risks
- 20:10Account lifecycle and monitoring
- 21:54Ongoing access and authentication
- 22:15Account recovery vulnerabilities
- 23:00Building a trust layer
- 24:22Key takeaways and resources
related talks
26mIntegrating Identity and Fraud
45mApplying Past Lessons for Intel-Driven Identity Threat Detection
31mLog In Through the Front Door: Automating Defense Against...
40mWeb Attacks and Fraud: Lessons Learned from the Deep End of the Pool
33mYour Identity Is Mine: Techniques & Insights From OS Identity Providers Research
49mBeyond Takeover: Attacker’s in. Now what?
48mModern Cybercriminals Don't Hack In, They Log In
29mBecoming You: A Glimpse Into Credential Abuse