Sep 21, 2026 · 53 min · 11 segments
Amihai Niederman joins me on this episode of the TechSpective Podcast to talk about what happens to identity security once AI agents start outnumbering the humans on a company's network. He's the…
There are a few of them that I outright said, like, pass, never touching this.
But we started talking about identity and identity security because we felt that Identity is such a huge problem in cybersecurity, mostly because for the better part of its existence, most people didn't look at it as a cybersecurity problem.
Your identity systems, your active directories, and things like that were things that were living inside your Intel networks.
So if you get hacked, and somebody tells you that your Active Directory got hacked, you're not going to say, oh my God, somebody got to my Active Directory.
You say, how did they go through the VPN or the firewall? How did they get into the network in the first place? But when things start moving more to the cloud and SaaS, the identity systems, the IDPs, the identity providers, they start becoming kind of the kind of the gatekeeper, they're the one, they're the system can decide whether you're in or you're out.
And since kind of started taking over, conceptually, at least the concept of I want to call VPN, like accessing the internal network in the organization.
They started looking at identity as something they could steal if they want to hack into your organization, because I won't say it's the easiest thing in the world, but it's significantly easier than trying to attack network devices to steal somebody's credentials.
You get their username and password somehow through phishing, through there's dozens of different approaches to do this.
You log in, you start talking to people over Slack, They see somebody that they know by name is chatting with them, so they're going to maybe share information with them.
You start doing the entire lateral move and the entire expanding inside the organization.
You're doing this on what I like calling the identity topology instead on the network, like what traditional cyber operations used to look like.
And we talked like, how is that possible? There was so much money that got into identity security in the last years.
Like we've seen dozens or a couple of dozens of those cybersecurity companies that came and everyone said they're going to solve this identity problem and that identity problem.
And we kind of got into a realization that the problem is that the core of the problem, and one reason we end up with the name U-Core too, is that all those traditional identity companies, which are great, they built great products over the years, is that they never thought of themselves as a security company.
They never looked at themselves as that they own the security of the organization.
And they kind of relied on those bolt-on companies that we're building features, great features to work with them to solve those problems or work on top of them.
But what happens is that you as an organization, like a mid-sized organization or even large ones, we talk with maybe probably more than 100, 200 different CISOs.
I remember I actually averaged out like how many different identity security tools they're using.
If I remember, I had like this big Excel spreadsheet that we had when we started the company.
There are a few of them that I outright said, like, pass, never touching this.
But we started talking about identity and identity security because we felt that Identity is such a huge problem in cybersecurity, mostly because for the better part of its existence, most people didn't look at it as a cybersecurity problem.
Your identity systems, your active directories, and things like that were things that were living inside your Intel networks.
So if you get hacked, and somebody tells you that your Active Directory got hacked, you're not going to say, oh my God, somebody got to my Active Directory.
You say, how did they go through the VPN or the firewall? How did they get into the network in the first place? But when things start moving more to the cloud and SaaS, the identity systems, the IDPs, the identity providers, they start becoming kind of the kind of the gatekeeper, they're the one, they're the system can decide whether you're in or you're out.
And since kind of started taking over, conceptually, at least the concept of I want to call VPN, like accessing the internal network in the organization.
They started looking at identity as something they could steal if they want to hack into your organization, because I won't say it's the easiest thing in the world, but it's significantly easier than trying to attack network devices to steal somebody's credentials.
You get their username and password somehow through phishing, through there's dozens of different approaches to do this.
You log in, you start talking to people over Slack, They see somebody that they know by name is chatting with them, so they're going to maybe share information with them.
You start doing the entire lateral move and the entire expanding inside the organization.
You're doing this on what I like calling the identity topology instead on the network, like what traditional cyber operations used to look like.
And we talked like, how is that possible? There was so much money that got into identity security in the last years.
Like we've seen dozens or a couple of dozens of those cybersecurity companies that came and everyone said they're going to solve this identity problem and that identity problem.
And we kind of got into a realization that the problem is that the core of the problem, and one reason we end up with the name U-Core too, is that all those traditional identity companies, which are great, they built great products over the years, is that they never thought of themselves as a security company.
They never looked at themselves as that they own the security of the organization.
And they kind of relied on those bolt-on companies that we're building features, great features to work with them to solve those problems or work on top of them.
But what happens is that you as an organization, like a mid-sized organization or even large ones, we talk with maybe probably more than 100, 200 different CISOs.
I remember I actually averaged out like how many different identity security tools they're using.
If I remember, I had like this big Excel spreadsheet that we had when we started the company.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.