Recent Identity Threats and Trends: Lessons to Improve Identity Security

Abstract

As organizations modernize access architectures, attackers continue evolving their tactics to target identity infrastructure, session tokens, and authentication pipelines. This presentation examines recent real-world identity attack vectors mapped across modern threat frameworks (including MITRE ATT&CK techniques such as credential forging, token manipulation, input prompt capture, and session hijacking). The talk explores lessons learned from observed compromises and outlines actionable engineering strategies to strengthen enterprise identity posture and authentication resilience.