The 14th Edition of the Identity Jedi Newsletter

Wednesday 12/07/22 - Identity Jedi Newsletter - Subscribe

Hey {{first_name| Jedi}} ! Welcome to the 14th edition of the Identity Jedi Newsletter! It's officially December and the holiday season is upon us. Snow is falling, fireplaces are crackling, and we are all starting to get a little reflective.

This year has been interesting for a variety of reasons. We've exited the phase of the tech company boom. Layoffs are coming left and right, and profit and EBIDTA are becoming relevant. This means customers are looking very selectively at their current technology needs and deciding what's bringing value and what's not. Gone ( for now) are the days of increasing budgets and headcounts so customers will demand to see actual value. It's a great time to change how we position identity and make it an active part of the security conversation.

Speaking of conversation. Have you spread the word about the newsletter? C'mon {{first_name| Jedi}} you can't keep all this great content to yourself! Tis the season after all! And you get FREE STUFF!

Lets get to the good stuff!

What's happening this week

Malware Market Bonanza

Nathan Eddy discusses the hike in the demand for info stealer malware, combining stolen credentials and social engineering to carry out high-profile breaches and leverage multifactor authentication attacks.

Infostealer Malware Market Booms, as MFA Fatigue Sets In

The successful combo of stolen credentials and social engineering to breach networks is increasing demand for infostealers on the Dark Web.

https://www.darkreading.com/threat-intelligence/infostealer-malware-market-booms-mfa-fatigue

Identity is Security

In this article, Boey Chern-Yue, Senior Vice President of Asia-Pacific, SailPoint, directs organizations to prioritize their identity security. He also explains that identity-based cyberattacks are the leading cause of security breaches because identities go beyond just humans. Machine identities currently outweigh human ones by 45 times on average, notwithstanding that the average employee already has more than 30 identities. He concludes by making some predictions for 2023 that should serve as a guide for all security-conscious organizations.

Sharpen your 2023 vision: Time to make identity security your priority

Identity-based cyberattacks have caused massive repercussions, with news of access breaches hogging headlines daily. According to Identity Defined Security Alliance (IDSA), 84% of organisations experienced an identity-related breach in 2021, with 78% suffering direct business impact. Why are identity-based cyberattacks the leading cause of security breaches? One key reason may be that identities go beyond just human. Machine identities are outweighing human ones by 45 times on average – not withstanding that the average employee already has more than 30

https://www.theedgemarkets.com/article/sharpen-your-2023-vision-time-make-identity-security-your-priority

Zero Fux left

The implementation of zero-trust initiatives is lagging despite its increase in popularity. Research shows that most organizations are falling behind; for instance, although 91% are aware of or planning to deploy a zero-trust architecture, only 12% have fully deployed it. Click on the link to learn more.

Zero-Trust Initiatives Stall, as Cyberattack Costs Rocket to $1M per Incident

Researchers find current data protections strategies are failing to get the job done, and IT leaders are concerned, while a lack of qualified IT security talent hampers cyber-defense initiatives.

https://www.darkreading.com/endpoint/zero-trust-initiatives-stall-cyberattack-costs-1m-per-incident

Product News

LogicGate Enhances Risk Cloud® with Cyber Risk & Controls Compliance Solution | LogicGate Risk Cloud

LogicGate Enhances Risk Cloud® with Cyber Risk & Controls Compliance Solution

https://www.logicgate.com/news/logicgate-enhances-risk-cloud-with-cyber-risk-controls-compliance-solution/

Fine-Grained Authorization – Amazon Verified Permissions – Amazon Web Services

Amazon Verified Permissions provides developers with a centralized fine-grained permissions management and authorization system for custom applications.

https://aws.amazon.com/verified-permissions/

Good Reads

The Rocky Road to Digital Transformation - CPO Magazine

One of the biggest obstacles enterprises face during their digital transformation journey is operating in a hybrid model that maintains legacy systems while migrating to the cloud. A main issue with hybrid environments is identity management.

https://www.cpomagazine.com/cyber-security/the-rocky-road-to-digital-transformation/

How to Overcome Access Governance Challenges in Multi-Cloud Environments | Tripwire

Multi-cloud offers immense value to “hyperscale” organizations, in that it allows them to leverage the best of breed technology that each cloud provider has to offer, build redundant architecture for high speed and low latency, or avoid vendor lock-ins.

https://www.tripwire.com/state-of-security/how-overcome-access-governance-challenges-multi-cloud-environments

Podcasts

Identity Masters

Listen to Identity Masters on Spotify. Welcome to Identity Masters, an Authenteq podcast, where we explore all things identity and how to increase the security of the internet.

https://open.spotify.com/show/0NmFDoGu9zq3r1nmgjwkhQ

Zero Tr*sts Given | Okta

https://www.okta.com/au/resources/zero-trusts-given-podcast/

‎Hacking Humans on Apple Podcasts

‎Technology · 2022

https://podcasts.apple.com/ca/podcast/hacking-humans/id1391915810

Last Word

There may be a slowdown on the newsletter this next couple of weeks. ( GASP!) It's the holiday season, folks, and as much as I love identity and love every one of you. I love my family more..lol. I'll try my best to get ahead of the next three editions, but I make no promises. Enjoy this time folks. Hug your loved ones, take plenty of pictures, and remember what's important! Peace, and Love to you all!

I'll see ya next week.

Be Kind to each other, Be Good to each other, Love each other.

-Identity Jedi