#460 - Sponsor Spotlight - Silverfort
Source: YouTube · Identity at the Center · published Nov 11, 2026 · 1:04:27
The Identity at the Center podcast explores the accelerating threat of AI-driven identity attacks, featuring Rob Ainsworth, Chief Identity Security Advisor at Silverfort, who demonstrates how AI agents can compromise enterprise environments at machine speed 25:00.
Key Takeaways:
• AI agents are not relying on novel exploits but are leveraging known identity vulnerabilities (like Kerberoasting) with unprecedented speed and parallelization, achieving domain dominance in under 4 minutes 25:57.
• The "AI Attack Lab" (Cypher) reveals that while the methods are traditional, the dynamics have shifted; agents operate in fleets, sharing knowledge instantly to chain low-level vulnerabilities into high-level compromises 17:25.
• Silverfort’s research indicates that the cost of running these AI attacks is dropping rapidly (down to ~$5), making scalable, automated identity compromise economically viable for adversaries 26:30.
• Traditional IAM governance is insufficient against machine-speed threats; organizations must implement inline runtime enforcement to control risk as it happens, rather than relying solely on pre-event hardening 45:00.
• Security teams must prioritize protection plans for Non-Human Identities (NHIs), as AI models are specifically targeting machine accounts due to their high privileges and frequent monitoring gaps 48:40.
The discussion highlights a critical shift in cybersecurity strategy: identity must be treated as a dynamic control plane (a "drawbridge") that can tighten defenses in real-time as threats are detected, rather than just a static access management tool.
Sources:
- 25:00 Introduction of the AI Attack Lab and the goal to compromise the domain.
- 25:57 Demonstration of an agent achieving domain dominance in 3 minutes and 48 seconds.
- 17:25 Explanation of how agents use parallel fleets to chain vulnerabilities.
- 26:30 Discussion on the decreasing cost of running AI attacks.
- 45:00 Argument for inline runtime enforcement over traditional governance.
- 48:40 Advice to prioritize protection plans for Non-Human Identities.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
[music] >> This is Identity at the Center. >> Welcome to the Identity at the Center podcast. I'm Jeff and that's Jim. Hey Jim. >> Hey Jeff, how are you? >> Oh, not so bad yourself? >> I'm doing good. Hey, one of you bring up one of our listeners, our great listeners Mark, commented on an episode about 8 months ago. He said, I'm going to read this, "It would be nice to go 5 seconds without talking about AI." I think we're going to disappoint Mark today. >> [laughter] >> I think we've been disappointing Mark for 8 months, honestly, because it's just look, it's it's the zeitgeist, right? It's what everyone's talking about right now and you know, sorry, but that's just kind of where the world is, you know, a couple years ago it was a decentralized and blockchain and before that zero trust and …