When Every Step Looks Legitimate: Identity Defense in the AI Era

By the end of this session, participants will be able to:

• Describe how identity-based attacks have evolved, including AI-generated social engineering, adversary-in-the-middle session hijacking, and compromised identity providers.
• Explain why controls that verify access at the front door can’t account for what happens after it.
• Recognize multi-stage intrusions that pivot across SaaS applications and non-human identities.
• Account for the AI agents, OAuth-connected integrations, and machine identities that most security stacks were never built to see.
• Apply a practical framework for identity risk in the AI era: know what normal looks like for every identity, human or not, and surface the deviations that signal compromise.