Full Segment Notes
Identity has become the new security perimeter.In this SC Media webcast, Mandy Logan sits down with Spence Hutchinson, Senior Manager of Threat Intelligence Research at eSentire, to unpack findings from eSentire's 2025–2026 Threat Response Unit report and reveal how cybercriminals are industrializing identity compromise at unprecedented scale.Key topics include:Learn how modern attackers exploit valid credentials, cloud identities, and trusted tools—and what organizations can do to stay ahead.Thank you to our sponsor of this webcast, eSentire!-> Register for upcoming SC Media webcasts:
https://www.scworld.com/webcasts/?utmsource=scmagazine&utmmedium=social&utm_campaign=youtubeSubscribe to SC Media for expert cybersecurity analysis, threat intelligence, and security leadership insights.
- 389% increase in identity-based attacks
- Why attackers now prefer "log in, don't break in" tactics
- Phishing-as-a-Service and MFA bypass techniques
- Tycoon 2FA and adversary-in-the-middle phishing attacks
- 14-minute exploitation windows after credential theft
- IT impersonation, vishing, and AI-powered social engineering
- Remote Monitoring & Management (RMM) abuse
- Identity Threat Detection & Response (ITDR) strategies
- Actionable defenses for security leaders
Key Moments
- 0:00 - Introduction
- 03:15 - Why Identity Is the New Perimeter
- 08:30 - 85% Success Rate Using Valid Credentials
- 13:25 - Phishing-as-a-Service & Tycoon 2FA
- 20:25 - IT Impersonation & Vishing Attacks
- 25:20 - ClickFix & Fileless Malware Delivery
- 28:15 - The 14-Minute Exploitation Window
- 31:15 - RMM Abuse & Persistence
- 36:45 - Most Targeted Industries
- 42:30 - How AI Helps Defenders
- 47:15 - Defending Against AI-Powered Threats
- 52:30 - Fake IT Workers & DPRK Operations
