Presented by Cisco
Are you aware that enterprise security is facing an identity crisis? Instead of going after high-tech exploits, attackers are now focusing on low-tech methods like identity compromise through social engineering. According to Matt Caulfield, VP of product, identity at Cisco, tricking someone into giving access to their account is akin to sneaking in through the front door wearing a construction vest.
With the help of AI, attackers can now efficiently carry out spearphishing attacks at scale, increasing their success rates. Despite this, there seems to be a disconnect between awareness and action in many organizations. The Cisco Duo’s 2025 State of Identity Security report revealed that a significant number of organizations have suffered financial losses due to identity-related breaches, yet identity security remains an afterthought for many IT leaders.
Identity security is a complex problem that combines social, psychological, and technical aspects. While preventing identity breaches entirely is challenging, it is crucial for ensuring the safety of systems and users. Strong identity and access management (IAM) is no longer a choice but a necessity, especially as AI agents become more prevalent in organizations.
Redefining Zero Trust
Trust can no longer be based solely on network access or device origin. Strong cryptographic identity authentication is now essential for establishing trust. Identity must be the foundation of enterprise security, ensuring that systems are secure, humans are protected from hijacking, and AI agents only perform authorized actions.
Traditional second-factor and multi-factor authentication methods are no longer enough, as they can be vulnerable to hacking. Leaders recognize the importance of phishing-resistant authentication, but deployment of solutions like FIDO2 tokens has been limited due to complexity and cost.
Security as a Catalyst
Identity security awareness is increasing, with more organizations investing in this area. However, security should not be treated as an add-on, leading to tool sprawl and increased costs. Integrated tools that offer interoperability in multi-cloud environments can simplify operations, reduce costs, and enhance security.
Identity management and security are not just about protection; they also enable workforce productivity and customer interactions. Phishing-resistant authentication is key to adopting an identity-first approach to security.
Discover how Duo and Cisco Identity Intelligence are simplifying the identity landscape for global teams: Download Cisco Duo’s report, The 2025 State of Identity Security: Challenges and Strategies from IT and Security Leaders.
Sponsored articles are content produced by a company that is either paying for the post or has a business relationship with VentureBeat, and they’re always clearly marked. For more information, contact sales@venturebeat.com.
