Show Notes
All links and images can be found on CISO Series. Identity has become the Gordian knot of cybersecurity. Threat actors no longer need to break in. They log in. As organizations manage increasingly complex ecosystems spanning cloud, on-premises, and hybrid environments, the challenge isn't just understanding who has access to what. It's about understanding how an attacker could chain together seemingly innocent permissions to escalate from an initially compromised user to full environment control. The problem is compounded by privilege creep, where employees accumulate access over time as roles change and exceptions pile up without systematic review. Traditional security tools excel at protecting identities at rest or governing access for individual users. Still, they often miss the needle in the haystack: the cascading attack paths that adversaries actively exploit. In this episode, Justin Kohler, chief product officer at SpecterOps, explains how Bloodhound Enterprise addresses these challenges by proactively uncovering and eliminating attack paths before adversaries can exploit them, transforming abstract permissions into visual maps that show precisely how attackers could move through your environment. Joining him are Angela Williams, SVP and CISO at UL Solutions, and Brett Conlon, CISO at American Century Investments. Want to know: Why does identity security remain such a persistent challenge for organizations? What attack path management actually does versus traditional identity governance tools? How does Bloodhound Enterprise complement other solutions in your stack? How to visualize and prioritize the attack paths that matter most? What emerging identity-based threats should CISOs prioritize over the next 12 months? How has the definition of "identity" evolved beyond just human users? Can continuous attack path mapping keep pace with dynamic cloud environments? Huge thanks to our sponsor, SpecterOps
SpecterOps' 2025 State of Attack Path Management report reveals how technical debt transforms into identity risk and provides actionable strategies for security teams. Drawing insights from the creators of BloodHound, this report outlines proven methods for strengthening identity directory security to prevent costly breaches. Learn more at https://specterops.io/.
More from Security You Should Know
In this episode, Joshua Knox, Principal Cybersecurity Strategist and AI Lab Tech Lead at Horizon3, explains how the company's NodeZero platform runs continuous, autonomous offensive assessments that surface exploitable attack chains and dangerous misconfigurations, not just vulnerabilities, so teams can prioritize and validate fixes on a repeatable basis. Joining him are Jesse Webb, CISO and SVP of Information Systems at Avalon Healthcare Solutions, and Ryan Brown, Director and Head of Cybersecurity Operations at Children's National Hospital.
In this episode, Ashu Savani, co-founder of TryHackMe, explains how the company's Live Breach product puts teams inside fully-executed, realistic breach simulations built around the threat actors and tech stacks they face, building the reflexes and reporting security leaders need before a real incident hits. Joining him are Roland Toussaint, Senior Director of Incident Response and Security Engineering at ChenMed, and Heather Hinton, CISO at Sitecore.
In this episode, Joseph Perla, founder and CEO at TrustedRouter, explains how his company's confidential-computing-based LLM router lets teams send prompts to hundreds of AI models while cryptographically verifying, rather than simply trusting, that no one, including TrustedRouter itself, can see the data passing through. Joining him are TC Niedzialkowski, former head of IT & security at Opendoor, and Keith McCartney, svp of security and IT at DNAnexus.
In this episode, Dean Shroll, senior director of sales engineering at ThreatDown, explains how the company's Nebula and OneView consoles simplify protection across Mac, Linux, and Windows endpoints while its managed detection and response team absorbs the 24/7 monitoring that resource-constrained teams can't staff on their own. Joining him are Jonathan Waldrop, CISO at Acoustic, and Arif Hameed, CISO at C&R Software.
In this episode, Leo Taddeo, CEO and President at AppGate, explains how the company's zero trust network access platform cloaks internet-facing infrastructure from discovery, uses direct-routed architecture instead of cloud-routed hairpinning to avoid the latency tax, and layers in continuous, context-aware policy checks that go beyond device posture and MFA. Joining him are Ross Young, co-host of CISO Tradecraft, and Derek Fisher, Director of the Cyber Defense and Information Assurance Program at Temple University.