Identity Resilience: The Keystone of a Critical Recovery Process | EP 63

What happens when cybercriminals stop breaking in and simply log in?In this episode of the WEI Tech Talk Podcast, Todd Humphreys, Cybersecurity GTM Leader at WEI, sits down with Patrick Haverty and Parker Gaines from Rubrik to explore why identity has become the primary target for modern attackers and why identity recovery is now a critical component of cyber resilience. The discussion is grounded in real-world incidents, including the NotPetya attack on Maersk and more recent identity-focused attacks targeting organizations through compromised credentials, MFA manipulation, and Active Directory disruption.The conversation examines how threat actors establish persistence, escalate privileges, compromise Active Directory and cloud identity platforms, and create recovery challenges that many organizations are unprepared to address. Todd, Patrick, and Parker also discuss the growing importance of protecting and recovering identities across hybrid environments, including Active Directory, Microsoft Entra ID, and other modern identity providers.Topics covered include:- Why attackers are "logging in, not breaking in"- Lessons learned from NotPetya, MGM, and other high-profile incidents- Active Directory and Entra ID recovery challenges- Identity resilience and cyber recovery strategies- Finding a clean recovery point after an attack- Reducing cyber recovery time objectives (RTOs)- The role of immutable backups and identity recovery- Building confidence in cyber resilience and business continuityIf you're a CISO, security leader, infrastructure architect, or IT professional focused on ransomware recovery, identity security, and cyber resilience, this episode provides practical insights into one of the most important security challenges facing organizations today.Learn more at wei.com/cybersecurity