Cybersecurity Focus Shifts from Devices to Identities

Sep 9, 2026

86 min

Sep 9, 2026 10:30

Cyber risk has shifted from devices to identities and privileges

## The Changing Landscape of Cyber Risk

Cybersecurity strategies have traditionally centered on protecting devices such as laptops and servers. However, the focus is now shifting towards managing identities and privileges. This change is driven by the realization that compromised credentials can escalate a device breach into a significant business crisis.

## The Role of Identity in Cybersecurity

A compromised identity, especially one with access to critical systems, poses a greater threat than a compromised device. The potential damage, or "blast radius," is determined by the entitlements associated with the identity. This shift highlights the importance of controlling what authenticated identities can access and their subsequent actions.

## Threat Actors and Identity Exploitation

Cybercriminals increasingly exploit legitimate credentials rather than bypassing sophisticated defenses. By impersonating trusted users, they can perform malicious activities that appear legitimate. This makes it crucial to monitor identity behavior and manage privileges effectively.

## Executive Considerations

Executives should engage in discussions about the potential impact of compromised identities. Key questions include which identities have access to sensitive information and the paths to privilege escalation. This approach shifts the focus from defensive measures to understanding business risks associated with identity-based attacks.

## The Impact of AI on Identity Management

The rise of AI agents adds complexity to identity management. These systems require identities and privileges, potentially increasing enterprise risk due to their speed and scale. Organizations must monitor AI behavior and manage their access to mitigate risks.

## Strategic Shift in Cybersecurity

While device security remains important, executives should prioritize reducing the blast radius of identities. This involves ensuring that privileges are necessary, temporary, and monitored. By doing so, organizations can better contain incidents and prevent them from escalating into business crises.

Read the full story at the source

What you need to know to get Emirates ID?

Leave your details and get a guide as a gift to avoid mistakes

Article contents

LinkedIn X Facebook WhatsApp Telegram