Episode

#409 - Q1 2026 Identity Threat Report Roundup

Podcast
Identity at the Center
Published
Mar 23, 2026
Duration seconds
3562
Processing state
not_requested
Canonical source
https://podcasters.spotify.com/pod/show/identity-at-the-center/episodes/409---Q1-2026-Identity-Threat-Report-Roundup-e3gi52v
Audio
https://anchor.fm/s/c5fefcc/podcast/play/117035551/https%3A%2F%2Fd3ctxlq1ktw2nl.cloudfront.net%2Fstaging%2F2026-2-17%2F488d2303-51b8-2130-86ba-bb6ec9550b19.mp3
JSON
/v1/public/podcasts/identity-at-the-center-344918/episodes/409-q1-2026-identity-threat-report-roundup
Markdown
/podcast/identity-at-the-center-344918/409-q1-2026-identity-threat-report-roundup.md

Actions

  • POST https://stenobird.com/v1/public/podcasts/identity-at-the-center-344918/episodes/409-q1-2026-identity-threat-report-roundup/transcription-requests
    Idempotently request low-priority transcript generation for this episode.
  • GET https://stenobird.com/podcast/identity-at-the-center-344918/409-q1-2026-identity-threat-report-roundup.md
    Read the agent-friendly Markdown representation of this episode resource.

Summary

Jeff and Jim review seven major IAM and cybersecurity industry reports from Q1 2026, covering releases from Check Point, Recorded Future, Sophos, Palo Alto Unit 42, IBM X-Force, Darktrace, and Hypr. They pull high-level findings and hot takes from each, identifying recurring themes: AI accelerating attack speed to as little as 72 minutes from breach to data exfiltration, identity infrastructure as the primary attack surface, machine identities as a growing and undermanaged risk, MFA gaps enabling credential abuse, and the near-impossibility of blocking every intrusion attempt. The episode also covers third-party and supply chain risk, deepfake attacks reaching 87% of surveyed organizations, stalled passkey adoption in the enterprise, and what zero standing privilege looks like in practice. They close with a lighter discussion on dark mode versus light mode and a hypothetical podcast reboot. Reports: Check Point Cyber Security Report 2026 — https://www.checkpoint.com/security-report/ Recorded Future 2026 State of Security Report — https://www.recordedfuture.com/research/state-of-security Sophos Active Adversary Report 2026 — https://www.sophos.com/en-us/blog/2026-sophos-active-adversary-report Palo Alto Networks Unit 42 Global Incident Response Report 2026 — https://www.paloaltonetworks.com/resources/research/unit-42-incident-response-report IBM X-Force Threat Intelligence Index 2026 — https://www.ibm.com/reports/threat-intelligence Darktrace Annual Threat Report 2026 — https://www.darktrace.com/resources/annual-threat-report-2026 HYPR 2026 State of Passwordless Identity Assurance Report — https://www.hypr.com/report Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the s…