9 Identity Security Predictions for 2026
Summary: A SailPoint CISO outlines nine identity security predictions for 2026, including AI-driven identity governance replacing manual access reviews and role-based access control, liveness detection to counter deepfakes, and passkeys from Apple, Google, and Microsoft making passwordless MFA the default. The piece also forecasts enterprise adoption of self-sovereign identity and verifiable credentials, unique attestable identities for OT and IoT devices, machine identities for every microservice and container, and post-quantum cryptography driven by "harvest now, decrypt later" attacks.
Bottom line: The article's own framing is that identity is the new perimeter, and it puts the CISO at the center as primary steward of digital trust across employee, customer, machine, and partner access. The concrete stake is standing privileges: the author argues manual access reviews and RBAC are already showing their age, and that just-in-time, AI-driven access is what reduces the attack surface they create.
Read the original at The Hacker News ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026