KuppingerCole Analysts

Join Matthias Reinwarth in this special episode of the KuppingerCole Analyst Chat as he welcomes not one but two expert guests: Nitish Deshpande, Research Analyst at KuppingerCole, and Martin Kuppinger, Principal Analyst and Co-Founder of KuppingerCole.

Together, they explore the evolution of modern authorization, discussing how far the industry has come since the early days of static entitlements and XML-based policies. From early insights shared back in 2009 to today’s dynamic, AI-enhanced, signal-driven authorization models, this episode unpacks the what, why, and how of modern access control systems.

πŸ“Œ Topics covered include:

βœ… What makes authorization "modern"?
βœ… The shift from RBAC/ABAC to PBAM (Policy-Based Access Management)
βœ… Real-time access decisions & context-aware authorization
βœ… The role of AI and ML in modern authorization
βœ… The connection between Zero Trust Architecture and dynamic policies
βœ… Local vs. global enforcement and the future of decentralized decision points
βœ… Data quality, governance, and identity lifecycle management
βœ… How tools like OPA (Open Policy Agent) are lowering the barrier to adoption

In this videocast, KuppingerCole Analysts' Senior Analyst Warwick Ashford is joined by Prakash Sinha, Senior Director and Technology Evangelist at Radware, to explore how security teams can drive Mean Time To Resolution (MTTR) close to zero. As AI-powered attacks increase in sophistication and frequency, security operations centers (SOCs) must evolve by leveraging automation and AI-driven incident response.

Prakash shares insights on how AI can enhance threat detection, automate remediation, and reduce analyst workloads while maintaining governance and accountability. Discover practical steps for implementing AI-assisted security and the key success factors for modernizing SOCs in the face of an ever-changing threat landscape.

πŸš€ AI is reshaping Identity & Access Management (IAM)! As artificial intelligence evolves, businesses must navigate a new era of digital identity, security risks, and AI-driven decision-making. Will Agentic AI and RAG (Retrieval-Augmented Generation) redefine the way we manage identity and access?

In this week's episode, Matthias Reinwarth is joined by Anne Bailey to explore how Agentic AI, Retrieval-Augmented Generation (RAG), and the latest AI-driven identity strategies are revolutionizing cybersecurity and digital identity.

πŸ” Topics Covered:
βœ… What is Agentic AI, and how does it impact IAM?
βœ… The role of RAG (Retrieval-Augmented Generation) in enhancing identity verification.
βœ… How AI is transforming Identity Governance & Administration (IGA).
βœ… Challenges & opportunities of AI in security.
βœ… The future of IAM—What’s next?

🚨 AI-powered cyber attacks are here—are you prepared? Generative AI is changing the way cybercriminals operate, making phishing scams, deepfakes, and social engineering attacks more convincing than ever. In this episode, Matthias Reinwarth and Jonathan Care explore how hackers are exploiting AI and what businesses can do to stay ahead.

πŸ”Ή Key Topics Covered:
βœ… How GenAI is revolutionizing phishing & social engineering attacks 🎭
βœ… The rise of deepfake scams & their impact on authentication security πŸ”
βœ… Hallucination-based attack vectors—what they are & why they matter
βœ… Can AI fight AI? Using machine learning to detect AI-powered threats πŸ€–
βœ… Practical strategies to defend against AI-driven cybercrime

πŸ’‘ Cyber threats are evolving fast—don’t wait until it’s too late! Watch now to understand how AI is reshaping cybersecurity and what you can do to protect your business.

In a blockbuster $32 billion deal, Google aims to redefine cloud security with the acquisition of Wiz, propelling the industry into uncharted territory. As the allure of integrated security solutions promises to bridge fragmented environments, the spotlight is on Google's next moves in the battle against cyber threats. Dive into what's next for cloud security!

Read the original blog post here: https://www.kuppingercole.com/blog/small/google-acquires-wiz

Step into the realm of modern identity management with federated identities but beware of potential pitfalls. Organizations are welcoming external partners into cloud environments, challenging traditional IAM frameworks. Unravel how your company can embrace this evolution while maintaining security, compliance, and efficiency. Read on to navigate these uncharted waters with confidence and strategic foresight.

Read the original blog post here: https://www.kuppingercole.com/events/eic2025/blog/federation-without-frustration-setting-the-right-framework-for-external-identities

🚨 Think your cyber insurance covers everything? Think again! Many organizations assume they’re protected, only to find critical gaps in their policies when disaster strikes. In this episode, Matthias Reinwarth speaks with John Tolbert to uncover the truth about cyber liability insurance and what businesses must do to stay protected.

πŸ”Ή Key Topics Covered:
βœ… What cyber insurance actually covers—and the risks that aren’t included
βœ… Essential security measures insurers require before offering coverage πŸ”’
βœ… The role of MFA, zero trust, and attack surface management in cyber policies
βœ… The hidden gaps that could leave your business exposed
βœ… How AI-driven threats are changing the future of cyber insurance

πŸ’‘ Cyber risks are evolving—are your policies keeping up? Watch now to learn how to reduce risk, avoid costly mistakes, and strengthen your cybersecurity strategy.

In the era of cloud-driven business, non-human identities are more pervasive than ever. They offer immense utility but also risky vulnerabilities. Discover how ITDR solutions are turning the tide in identity threat detection, ensuring that your organization's automated processes remain seamless and secure. The future of identity security starts here.

Read the original blog post here: https://www.kuppingercole.com/events/eic2025/blog/rage-against-the-machines-itdr-and-the-rise-of-non-human-identities

In this episode of KuppingerCole Analyst Chat, host Matthias Reinwarth welcomes back Alexei Balaganski, Lead Analyst at KuppingerCole Analysts, to continue their deep dive into quantum computing and its impact on authentication security. They discuss the increasing risks posed by quantum threats, the vulnerabilities of current encryption standards, and the critical role of crypto agility in ensuring long-term security.

The conversation explores how organizations can prepare for the post-quantum era, highlighting strategies such as hybrid cryptography, quantum-resistant algorithms, and zero-trust authentication models. Alexei shares insights into the latest advancements in quantum-safe security, regulatory considerations, and practical steps businesses can take to mitigate future risks. The episode wraps up with a look at emerging trends in quantum security and what the future holds for authentication in a rapidly evolving digital landscape.

In this episode of KuppingerCole Analyst Chat, host Matthias Reinwarth is joined by Martin Kuppinger, Principal Analyst at KuppingerCole Analysts, to explore the intersection of Non-Human Identities (NHI) and Identity Threat Detection and Response (ITDR). They discuss the growing importance of securing machine identities, service accounts, APIs, and automation processes, as well as the security risks associated with overprivileged accounts and mismanaged credentials.

The conversation highlights how ITDR enhances traditional IAM and PAM solutions by providing real-time monitoring, anomaly detection, and automated threat response. Martin shares insights into AI-driven threat detection, zero-trust principles, and best practices for organizations looking to mitigate identity-based threats. The episode concludes with a look at emerging trends in ITDR and the future of machine identity security.