Episode 89 -- Beyond Passwords: Making Identity-Based Attacks Impossible in the Age of AI

In this episode, Dr. Dave Chatterjee sits down with Jasson Casey, CEO and Co-Founder of Beyond Identity, to explore why identity-based attacks now drive nearly 80% of breaches—and how adversaries increasingly log in instead of breaking in. Casey unpacks the mechanics of modern credential attacks, including MFA fatigue, push bombing, phishing kits, and session hijacking, and explains why outdated passwordless approaches fall short against AI-powered adversaries.

Drawing from real-world deployments and government advisory work, Casey outlines how hardware-backed, phishing-resistant authentication can eliminate the root causes of credential theft while drastically reducing SOC workloads. Dr. Chatterjee integrates his Commitment–Preparedness–Discipline (CPD) framework to show how identity defense must be elevated to a board-level governance priority.

Whether you're a CISO, IAM architect, security leader, or AI-curious practitioner, this episode delivers practical strategies for building identity resilience in a world where deepfakes, agentic AI, and automated impersonation redefine the threat landscape.

🔑 Episode Highlights

Identity-based attacks: MFA fatigue, session hijacking, phishing kits

Passwordless vs. phishing-resistant authentication

Case studies showing credential-theft incidents dropping to near zero

Why human training fails in the AI era

How AI empowers attackers—and defenders

“Ring deployment” strategies for phased rollouts

CPD framework applied to identity governance

🛡️ Actionable Takeaways

Adopt phishing-resistant, hardware-backed authentication

Continuously validate devices, sessions, and agent authorization

Reduce reliance on employees to detect deepfake-enabled phishing

Use Red Team exercises to test resilience

Build leadership commitment and monitoring discipline through CPD

https://www.cybersecurityreadinesspod...