Name: You Have a Password Management Problem. Let's Solve It.
Start: 2023-11-14T23:34:00Z
End: 2023-11-14T23:34:19.000Z
Location: BrightTALK
Rating: 0

Centered on intelligent privilege controls, CyberArk provides the most comprehensive security offering for any identity - seamlessly securing human and machine identities accessing workloads from hybrid to multi-cloud, and flexibly automates the identity lifecycle all with continuous threat detection and prevention – protecting organization’s identities and most critical assets by enabling Zero Trust and enforcing least privilege.  

Enterprises have an abundance of machine identities to secure, both on-premises and in the cloud, and that data has become increasingly difficult to secure.  Faced with growing volumes of machine identities—particularly driven by DevOps, public cloud services, and the emerging wave of agentic AI—security teams struggle with visibility, management, and security for machine identities. This conversation highlights Enterprise Strategy Group research findings on machine identity breaches, examines CyberArk's approach to discovery and mitigation across diverse enterprise environments, and offers practical advice for CISOs seeking quick wins in this complex security domain.

This video features an in-depth conversation between Todd Thiemann, Principal Analyst at Enterprise Strategy Group, and Uzi Ailon, VP of DevOps Solutions at CyberArk, exploring the critical yet underappreciated challenge of machine identity security.

The Next Frontier in Identity Security: Machines, Secrets and AI

Take an in-depth look into the journey toward a passwordless future, examining both its benefits and the challenges organizations face during the transition. We’ll outline the necessary steps and the critical milestones, to ensure progress and results.  

Through customer stories and practical examples, dive into the most common roadblocks and effective strategies for overcoming them. We’ll also detail a high-level implementation plan and timeline to help guide your organization's transition. Join us to gain actionable insights and a clear path to a passwordless experience.

Why Passwordless Adoption Stalls: Strategies to Overcome Roadblocks

In this expert-led keynote, learn how the CyberArk Identity Security Platform is reshaping how organizations protect human, machine and AI identities. Explore groundbreaking innovations like Cora AI for anomaly detection and automation, zero standing privilege and streamlined multi-cloud security solutions. Gain actionable insights to simplify complex environments, mitigate emerging threats and future-proof your organization. Don’t miss this dynamic keynote packed with cutting-edge tools, real-world demos and strategies to redefine identity security

Come see us at IMPACT World Tour! Taking place in more than 30 cities around the world, IMPACT World Tour will feature curated content and sessions most relevant to your geography, along with local customer and industry speakers. Join us at a city near you! Visit: https://www.cyberark.com/impact-world-tour/

Innovation in Action: CyberArk Identity Security Platform

Hybrid cloud is now the default IT model—but truly unlocking its potential requires more than just connectivity. It demands modern identity security strategies that match the pace of cloud-native development. In this EcoCast, Brooke Jameson will share actionable strategies to secure access controls without slowing innovation.

Learn how to streamline operations with automation, eliminate excessive privileges through Zero Standing Privileges, and provide developers secure, native access across multicloud estates. Whether you’re expanding or refining your hybrid architecture, this session will show you how to balance agility with control.

Best Practices: Supercharging Your Hybrid Cloud Environment

Cloud environments are prime targets for cybercriminals, with mismanaged access often being the weakest link. The Codefinger ransomware attack is a stark reminder of the risks associated with persistent credentials and insufficient monitoring. In this webinar, we’ll analyze how attackers exploited AWS keys to encrypt data and demand ransom—highlighting the need for granular access control. More importantly, we’ll explore how Zero Standing Privileges (ZSP) and Time, Entitlements, and Approvals (TEA) frameworks can proactively mitigate such threats while maintaining developer productivity. Join us to learn how to secure cloud access without slowing innovation.

Preventing Cloud Access Mismanagement – Lessons from the Codefinger Ransomware Attack

In a galaxy not so far away, securing communications and protecting sensitive data is as crucial as outrunning an Imperial Star Destroyer. Join us for a thrilling webinar where we discuss optimizing Public Key Infrastructure (PKI) to run like the legendary Millennium Falcon - Han Solo's trusted ship known for its speed, security, and reliability.

Just as the Millennium Falcon navigates through hyperspace with unmatched precision, PKI provides the backbone for secure, encrypted communications in today's digital world. In this session, we’ll explore fine-tuning your certificate lifecycle management (CLM) strategy to ensure data travels safely across networks, much like the Falcon escaping danger at lightspeed.

Through this Star Wars-inspired session, you’ll learn how to:

- Use PKI as Your Hyperdrive Booster: See why PKI isn’t just security - it’s a business enabler that accelerates your mission.
- Fine-Tune Your Ship’s Navigation System: Automate certificate lifecycle management like the Falcon’s precise hyperspace calculations.
- Avoid Asteroids and Imperial Blockades: Conquer common security challenges, compliance roadblocks, and expiration dangers.
- Make the Kessel Run in Record Time: Deliver certificates faster, securely, and at scale - just like captaining the Falcon through hyperspace.

Whether you're a seasoned or novice hyperspace navigator, this webinar will help you calibrate your PKI for speed and security. Successfully pilot your Millennium Falcon across today’s digital galaxy.

Prepare for Lightspeed: How to Build Your Certificate & PKI Strategy for the Kessel Run

The CA/Browser Forum has approved sweeping changes to the TLS certificate lifecycle, reducing the maximum validity for public certificates to just 47 days, down from today’s 398. Starting in 2026, these changes will roll out in phases, forcing teams to renew certificates more frequently and rethink how they manage risk and compliance.

In this 45-minute session, certificate security experts George Parsons and Ryan Hurst will break down what’s changing, the operational risks of delayed action, and how organizations can use automation and policy alignment to adapt at scale.

Many teams today still rely on manual processes to check TLS certificate expiration, increasing the chances of missed deadlines and unexpected outages. Shorter certificate lifespans mean even a single expired TLS certificate can disrupt critical systems. Whether you're managing five or 10,000 certificates, knowing how to maintain visibility is essential.

You’ll leave the session with a clear understanding of how to:

- Modernize your TLS certificate lifecycle management strategy
- Communicate risk across technical and business teams, leadership, and the Board
- Build this change into your budget now (and quantify inaction to frame your business case)
- Ensure your infrastructure is ready for 47-day renewal cycles — mandatory for public PKI, and increasingly valuable for internal PKI as well.

Join us to get ahead of the transition and bring resilience to your TLS/SSL certificate lifecycle.

The Countdown to 47 Days: Are You Ready for the Biggest Change in TLS Certificate Lifecycle Management?

Traditional approaches to workforce identity security are no match for today's evolving threats.  This session introduces a defense-in-depth strategy that reimagines how to secure workforce identities effectively. Dive into practical techniques and frameworks designed to strengthen your organization's security posture, mitigate identity-based risks, and adapt to modern attacker tactics. Learn how to layer controls for a more resilient approach that extends beyond perimeter defenses, empowering your team to stay ahead of threats.

A Defense-in-Depth Approach to Workforce Security

Don’t miss this webinar focused on the critical security of Linux and Windows servers, the backbone of your enterprise operations. With cyberattacks on the rise, it’s more important than ever to understand the unique vulnerabilities these servers present. We’ll discuss effective strategies for mitigating risks, including the implementation of best practices and leveraging cutting-edge security solutions. Our expert speakers will provide valuable insights to help you fortify your organization’s defenses. Join us to learn how to protect your most valuable assets and ensure a robust security posture!

Securing Server Identities: Strategies for Linux and Windows Environments

Phishing and compromised credentials remain the leading causes of security breaches. Traditional passwords are not only vulnerable—they’re also cumbersome for users and expensive to manage. In this webinar, we analyze common credential attacks, including phishing, brute force and MFA bypass, through real-world examples and proven prevention strategies. 

We’ll also explore the transition to a passwordless experience, demonstrating how it enhances security and simplifies user access from endpoint, to application and beyond. Join us for actionable insights that empower cybersecurity professionals, CTOs, and CISOs to defend their organizations against credential-based threats.

How to Prevent the Most Common Password-Related Attacks

In today’s rapidly evolving digital landscape, organizations are increasingly adopting multi-cloud environments to enhance innovation, agility, and scalability. Yet this transformation brings significant challenges, particularly in managing and securing secrets across disparate platforms. While cloud-native tools offer some support, they often fall short in providing the visibility and compliance controls necessary—even within a single cloud, let alone across multiple. High-profile breaches, such as the 2022 Uber incident involving hard-coded secrets in scripts, and the U.S. Treasury attack exploiting exposed API keys, highlight the severe consequences of poor secrets management and the urgent need for more robust, unified solutions. 

Join cybersecurity experts as they delve into the intricacies of multi-cloud secrets management. This session will explore: 
· Unified secrets management strategies: Discover methods to synchronize and control secrets across AWS, Azure, and GCP using centralized tools like CyberArk Secrets Hub. 
· Automated secrets rotation: Learn how to implement automatic secrets rotation for all secrets to minimize exposure and give time back to developers and security engineers.  
· Governance and compliance: Understand how centralized secrets management aids in meeting regulatory requirements and enforcing consistent security policies. 
· Live demo: Learn how to create, deliver, and manage secrets across clouds (AWS, Azure, GCP), manage shared federated resources, visualize secret rotation workflows, and unlock the operational value of Secrets Hub. 

Whether you're a security leader or a cloud architect, this webinar will equip you with the knowledge to secure your secrets and simplify multi-cloud governance. 

Don’t miss this opportunity to turn cloud complexity into confidence.

Multi-Cloud, One Mission: Locking Down Your Secrets

In this webinar, we explore how a modern identity security program serves as the foundation for proactive audit readiness and continuous compliance. We'll examine practical strategies for aligning identity management practices with multiple frameworks and standards including PCI DSS, SOC 2, ISO 27001, NIST, NIS2, and DORA. 

Transform your identity security from a reactive checkbox exercise into a proactive program that strengthens your security posture while streamlining audit processes. Our experts demonstrate how centralized identity governance, automated access controls, and continuous monitoring can help you: 

Establish a single source of truth for identity-related audit evidence 

Reduce audit preparation time and costs 

Detect and remediate access-related risks before they impact compliance 

Build sustainable processes that adapt to evolving regulatory requirements 

Whether you're preparing for your next audit or looking to mature your identity security program, you’ll learn how to achieve and maintain compliance while enhancing overall security effectiveness.

Effective Identity Security Strategies for Audit-Ready Compliance

Agentic AI—systems powered by large language models (LLMs) that can act independently—are becoming increasingly common in modern workflows. From reviewing code to managing tickets and automation tasks, these systems introduce powerful capabilities and a radically new attack surface. 

This webinar breaks down how these agents work, what makes them vulnerable, and how attackers can exploit them using nothing but clever text. We’ll cover both the traditional attack surface and the new LLM-specific risks—and explore a demo agentic system to show these attacks live.

Agents Under Attack: Threat Modeling Agentic AI

Technology is a primary enabler of business growth, and according to March 2025 Forbes Research,* the C-Suite’s top priority (52%) is to speed up digital transformation. No surprise tech investments in Artificial Intelligence (AI) and cybersecurity are on the rise.   

As AI both accelerates innovation and emboldens attackers, organizations seek new defense paradigms that can protect the surge in machine identities, business adoption of AI agents and the entire range of human identities."

Is your business resilient enough? 
•Machine identities are outpacing humans by a ratio of 82:1 
•79% of identity-related breaches were caused by phishing
•87% of organizations experienced at least two successful identity-centric breaches in the past 12 months

In this session, we break down the top identity security trends identified in the CyberArk 2025 Identity Security Landscape Report and offer insights on how to reduce risk. 

Get insider’s view into: 
•Securing AI, including shadow risk and the explosion of machine identities
•Human behaviors undermining enterprise security — from password reuse to privilege sprawl
•Breaking security silos with integration and automation to maximize risk reduction

Modernize your identity security strategy, reduce risk and avoid costly breaches.

AI, Human Behavior and the Identity Security Risks You Can’t Ignore

There is an ever-widening gap between the threats to identities and access control and our ability to defend against those threats. Bad actors know it, and they exploit gaps in traditional, outdated security controls. Without a new identity security paradigm to meet new challenges, defense will fall behind and risk will increase. This new paradigm must protect a full spectrum of identities, break silos with unified discovery, policy creation and management across environments, grant privileges based upon context and risk, include ITDR and pre and post authentication projection. Learn how organizations build comprehensive security programs to meet today’s threats.

Securing the Future: The New Identity Security Paradigm for Cyber Leaders

AI agents are multiplying fast—outnumbering humans. Learn how to discover, prioritize, and secure them before they become a security risk.

AI agents are transforming enterprise operations, taking on critical tasks in security, IT, development, and beyond. But with projections suggesting that 50,000 employees would manage 100M AI agents - per department - organizations face an unprecedented identity security challenge. How do you discover, prioritize, and secure Agentic AI as machine identities increasingly outnumber human?

These new ‘digital workers’ are continuously learning and interacting with other systems, creating opportunities for unintended permission escalation and access to resources beyond their initial scope.

Join us in this live session to explore:
- An introduction to the unexpected security challenges with Agentic AI
- The security challenge scale brings to the table
- New approaches to minimize and reduce risk
- Live demos & labs research to establish your foundation to maintain control

Unexpected Security Challenges With Agentic AI

IT and security teams are overwhelmed by password chaos—resets, weak credentials, outdated policies, and security workarounds. Join CyberArk to learn why consumer-first password managers fall short for enterprises and what to look for in an enterprise-ready solution. 

Discover how to reduce IT burden, strengthen security, gain deeper visibility into workforce credentials, and deliver a seamless user experience with a robust password management solution.

The Enterprise Security Gap: Not all Password Managers are Created Equal

In this keynote session, Jen Easterly, former Director of the US Cybersecurity and Infrastructure Security Agency (CISA), takes you on a journey through her experiences in the military and cybersecurity, highlighting the transformative power of AI. She explores the dual nature of AI: its potential to revolutionize cybersecurity by detecting and mitigating threats at unprecedented speeds, and the inherent risks it poses if not properly secured. This keynote is essential viewing for those eager to explore the profound impact of AI on our digital security landscape and the critical steps needed to harness its power responsibly.

Come see us at IMPACT World Tour! Taking place in more than 30 cities around the world, IMPACT World Tour will feature curated content and sessions most relevant to your geography, along with local customer and industry speakers. Join us at a city near you! Visit: https://www.cyberark.com/impact-world-tour/

The Promise & Peril of Emerging Technology: Operating at the Intersection of Artificial Intelligence & CyberSecurity

This webinar discusses the pros and cons of different methods of storing, sharing and protecting passwords for business applications. You’ll hear about the best strategies for managing and protecting access to non-SSO-integrated apps, capabilities to look for in password management solutions, and how to evaluate your password management vendors.

You Have a Password Management Problem.  Let's Solve It.

Secure Access

Password Management

Access Management

Passwords

Enterprise Applications

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

You Have a Password Management Problem. Let's Solve It.

Presented by

About this talk

CyberArk