#409 - Q1 2026 Identity Threat Report Roundup

#409 - Q1 2026 Identity Threat Report Roundup

Jeff and Jim review seven major IAM and cybersecurity industry reports from Q1 2026, covering releases from Check Point, Recorded Future, Sophos, Palo Alto Unit 42, IBM X-Force, Darktrace, and Hypr. They pull high-level findings and hot takes from each, identifying recurring themes: AI accelerating attack speed to as little as 72 minutes from breach to data exfiltration, identity infrastructure as the primary attack surface, machine identities as a growing and undermanaged risk, MFA gaps enabling credential abuse, and the near-impossibility of blocking every intrusion attempt. The episode also covers third-party and supply chain risk, deepfake attacks reaching 87% of surveyed organizations, stalled passkey adoption in the enterprise, and what zero standing privilege looks like in practice. They close with a lighter discussion on dark mode versus light mode and a hypothetical podcast reboot.


Reports:


Check Point Cyber Security Report 2026 — https://www.checkpoint.com/security-report/


Recorded Future 2026 State of Security Report — https://www.recordedfuture.com/research/state-of-security


Sophos Active Adversary Report 2026 — https://www.sophos.com/en-us/blog/2026-sophos-active-adversary-report


Palo Alto Networks Unit 42 Global Incident Response Report 2026 — https://www.paloaltonetworks.com/resources/research/unit-42-incident-response-report


IBM X-Force Threat Intelligence Index 2026 — https://www.ibm.com/reports/threat-intelligence


Darktrace Annual Threat Report 2026 — https://www.darktrace.com/resources/annual-threat-report-2026


HYPR 2026 State of Passwordless Identity Assurance Report — https://www.hypr.com/report




Connect with us on LinkedIn:


Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/


Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/


Visit the show on the web at http://idacpodcast.com





TIMESTAMPS


0:00 - Intro and weather chat

3:00 - Conference updates: EIC Berlin and Identiverse

7:30 - Q1 2026 IAM report roundup overview

8:30 - Check Point Cybersecurity Report 2026

13:00 - Recorded Future State of Security 2026

17:00 - Sophos Active Adversary Report 2026

21:00 - Palo Alto Unit 42 Global Incident Response Report

23:00 - IBM X-Force Threat Intelligence Index 2026

28:00 - Darktrace Annual Threat Report 2026

29:30 - Common themes across reports

37:00 - Hypr State of Passwordless Identity Assurance 2026

44:30 - Overall takeaways: AI speed, machine identity, third-party risk

48:00 - Light mode vs. dark mode and podcast reboot hypothetical

57:00 - Wrap-up





KEYWORDS


IAM, identity and access management, IDAC, Identity at the Center, Jeff Steadman, Jim McDonald, cybersecurity, Q1 2026, Check Point, Recorded Future, Sophos, Palo Alto, Unit 42, IBM X-Force, Darktrace, Hypr, machine identity, NHI, MFA, passkeys, zero trust, zero standing privilege, AI threats, deepfakes, credential theft, phishing, ransomware, supply chain risk, ITDR, passwordless, EIC, Identiverse

Episoder(409)

#408 - AI vs AI with Joseph Carson

#408 - AI vs AI with Joseph Carson

Jeff and Jim welcome Joseph Carson, cybersecurity expert and host of the Security by Default podcast, for a conversation on AI in offensive and defensive security. Joseph shares the real-world inciden...

16 Mar 1h 3min

#407 - Sponsor Spotlight - Rubrik

#407 - Sponsor Spotlight - Rubrik

This episode features Drew Russell, Identity Resilience Platform Owner at Rubrik. Jim McDonald and Jeff Steadman explore the intersection of backup, recovery, and identity security. Drew explains how ...

11 Mar 54min

#406 - IDAC MailBag for February 2026

#406 - IDAC MailBag for February 2026

In this MailBag episode, Jeff Steadman and Jim McDonald tackle eight questions submitted by listeners from around the world, including Munich, Sao Paulo, Singapore, Toronto, Hanoi, London, Sydney, and...

9 Mar 1h 4min

#405 - RSM 2026 Attack Vectors Report

#405 - RSM 2026 Attack Vectors Report

Jeff and Jim sit down with David Llorens, principal at RSM, to break down the RSM 2026 Attack Vectors Report. Drawing from real-world offensive security engagements, David explains why identity contin...

2 Mar 1h 11min

#404 - Sponsor Spotlight - Bravura Security

#404 - Sponsor Spotlight - Bravura Security

This episode is sponsored by Bravura Security. Learn more at bravurasecurity.com/idac.This is a Sponsor Spotlight episode of the Identity at the Center podcast. Jim McDonald and Jeff Steadman are join...

25 Feb 55min

#403 - Strategic Identity Security with Simon Moffatt

#403 - Strategic Identity Security with Simon Moffatt

Simon Moffatt, founder and analyst at The Cyber Hut and co-host of The Analyst Brief podcast, returns to Identity at the Center for a wide-ranging conversation about the strategic evolution of identit...

23 Feb 1h 4min

#402 - An Update on SSF and CAEP with Atul Tulshibagwale

#402 - An Update on SSF and CAEP with Atul Tulshibagwale

In this episode of Identity at the Center, hosts Jeff and Jim dive into the details of the Shared Signals Framework (SSF) and Continuous Access Evaluation Profile (CAEP), with special guest Atul Tulsh...

16 Feb 1h 1min

Populært innen Teknologi

lydartikler-fra-aftenposten
romkapsel
teknisk-sett
smart-forklart
elektropodden
nasjonal-sikkerhetsmyndighet-nsm
energi-og-klima
rss-ki-praten
rss-impressions-2
fornybaren
shifter
tomprat-med-gunnar-tjomlid
rss-heis
rss-ai-forklart
rss-alt-vi-kan
rss-alt-som-gar-pa-strom
pedagogisk-intelligens
rss-praktisk-proptech
rss-fjorsilkebris-podcast
rss-anleggspraten