Identity security is poised to become the central pillar of enterprise and government cybersecurity strategies in 2026, driven by the escalating threat of AI-powered attacks, machine agents, and state-sponsored hackers that exploit weaknesses in traditional perimeter defenses, Security Brief United Kingdom reports.
Experts predict a fundamental shift where identity systems will be treated as critical infrastructure, akin to networks and data centers, requiring hardened, phishing-resistant components. Yubico's Geoff Schomburgk emphasized that with 85% of APAC respondents noting more sophisticated phishing, the priority is to "shrink credential-theft risk" by deploying tools like passkeys and hardware-backed MFA. Concurrently, a paradigm of "verified trust" will replace static perimeter models, demanding that every human and AI agent continuously prove its identity with context-aware, just-in-time permissions.
Ping Identity's Adam Preis noted that as machine agents gain access to critical functions, organizations must ask, "what can agents do once they're inside?" This strategic focus is heightened by state-linked threats targeting personal identity data for espionage and fraud, underscoring the need for rigorous patching, vulnerability management, and board-level oversight of identity as a core operational risk.
