Identity Threat Detection and Response | Image by Cliff Hang from Pixabay

On Tuesday, July 14 our topic is Identity Threat Detection and Response (ITDR) on Bluesky at 12:00 Noon Pacific Time. This topic and questions are by @LazBlazter.

Articles about identity threat have become more prevalent these days, but how do you protect yourself? Can we only respond after the fact, or is it possible to do anything ahead of time? Hear what others think on our chat. Or come visit for the side conversations about the scalding hot weather. Come visit this topic with us!

Join us on BlueSky each Tuesday from 12:00 noon to 1:00 p.m. Pacific Time for #DigiBlogChat. My partner for these chats is @LazBlazter.  If you need to know how to participate, click here: How to Join #DigiBlogChat. P.S. Don’t forget to add the #DigiBlogChat hashtag!

NOTE THE TIME: 8pm UK, 9pm W Europe, 3pm ET, Noon PDT

Questions

Q1: Demystifying the Term

Welcome to #DigiBlogChat! To kick things off: How do you define Identity Threat Detection and Response (ITDR) in simple terms, and why has it become a top priority for organizations recently? #DigiBlogChat 

Q2: The Evolution of the Perimeter

We often hear that “identity is the new security perimeter.” Do you agree? How does managing the threat surface change when we focus on credentials instead of traditional network walls? #DigiBlogChat

Q3: Spotting the Early Warning Signs

What are some of the most common “early warning signals” or anomalies that indicate an identity has been compromised? (e.g., impossible travel, unexpected privilege shifts) #DigiBlogChat

Q4: The Rise of Non-Human Identities (NHIs)

Recent data shows that Non-Human Identities (like AI agents, API keys, and service accounts) are massive security blind spots. How do you detect threats against identities that don’t belong to actual people? #DigiBlogChat

Q5: Fighting Fire with Fire: AI in ITDR

Adversaries are using automated tools and AI to scale identity theft. How can organizations leverage AI to proactively detect, triage, and stop identity-based attacks before they spread? #DigiBlogChat

Q6: Balancing Security with User Friction

Nobody likes an authentication prompt that interrupts their flow. How do security teams implement responsive ITDR controls without completely frustrating the end-user experience? #DigiBlogChat

Q7: The Critical “R” (Response & Operational Recovery)

Detection is only half the battle. If a core identity system (like Active Directory or an IdP) is compromised, what does a robust, tested “Identity Recovery” plan look like? #DigiBlogChat

Q8: Human Error vs. Sophisticated Attacks

Are traditional phishing/social engineering tactics still the biggest threat to identities, or are you seeing a shift toward more technical exploits like session hijacking and token theft? #DigiBlogChat

Q9: Mitigating Blast Radius

“Zero Standing Privilege” (eliminating constant admin access) is a trending defense strategy. How does minimizing privilege directly impact a team’s ability to respond to an identity breach? #DigiBlogChat

Q10: The Future of Trust

Looking ahead over the next couple of years, what major shift or technology do you think will completely redefine how we verify, manage, and protect digital identities? #DigiBlogChat