Identity Is the New Perimeter: Why Attackers Get In Before You Ever See Them Coming (Ep. 16)

You’re a CISO who rolled out MFA and an identity provider a while back, and leadership now treats identity as handled. Meanwhile, your teams keep adding AI agents, API keys, and new integrations faster than anyone can count them. Securing the login was a real step forward, but identities keep working long after someone signs in, and that’s where much of the exposure can sit. In this episode, host Tony Pietrocola, President and Co-founder of AgileBlue, and co-host Joe Marquette, AgileBlue CEO and Co-founder, talk with James Carder, Chief Security Strategist at Flare, about why identity remains a primary target and where many organizations may be looking in the wrong place. James explains how stolen session cookies, shared devices, aging keys, and blended human and AI agent permissions can create gaps that MFA alone may not cover, and Tony presses on how security priorities hold up when every part of the business says its needs come first. James discusses: - How stolen session cookies can let attackers get around MFA, and why in his experience they’re often worth more on criminal markets than usernames and passwords - Why one infected device can expose both personal banking logins and corporate credentials when work and personal use overlap - What makes non-human identities like API keys, service accounts, and AI agents a growing blind spot that many organizations can’t fully inventory - Why AI agents that borrow a human’s access can make it hard to tell who, or what, is doing what in current logs - How aligning security priorities to the CEO and board’s overarching goals can cut through competing demands and alert noise - And more! **Connect with Tony Pietrocola:** - AgileBlue - LinkedIn: AgileBlue - YouTube: @agileblue - LinkedIn: Tony Pietrocola **Connect with Joe Marquette:** - LinkedIn: Joe Marquette **Connect with James Carder:** - LinkedIn: James Carder - Website: Flare