Identity Is The New Perimeter: The Microsoft Digital Defense Report’s Biggest Wake-Up Calls

Petri Dish

LISTEN ON:

Attackers aren’t breaking in—they’re logging in. In this episode, we unpack the Microsoft Digital Defense Report 2025 and what it reveals about today’s identity-first threat landscape: infostealers, hybrid ransomware operations, and social engineering that blends into “normal” activity.

Joining the conversation are Chloé Messdaghi (strategic advisor on AI governance and cybersecurity at Microsoft) and Etan Basseri (Principal Product Manager, Microsoft Identity), with practical steps leaders can take now, from phishing-resistant multifactor authentication (MFA) to passkeys and building an identity control plane for humans and AI agents.

In this episode, we cover:

Identity is the new perimeter: modern attacks use legitimate sign-ins and multi-stage tradecraft that’s harder to spot
Scale is the story: why inconsistent adoption creates gaps that “explode at scale.”
Ransomware is often the finale: identity compromise is increasingly the first step.
Passwords are a liability: 97%+ of identity attacks are password-based—so shifting to phishing-resistant MFA and passwordless is a foundational move.
What “phishing-resistant” looks like in practice: passkeys/FIDO, Windows Hello for Business, certificate-based auth—then enforce with Conditional Access.
Threat intelligence in the real world: how Microsoft shares verified threat actor indicators (e.g., known bad IP ranges) through identity protection signals.
AI changes both offense and defense: attackers move at machine speed; defenders need AI with guardrails.
Token theft and replay: why endpoint and identity signals matter for detecting suspicious token use.
Actionable next step: make phishing-resistant MFA coverage a leadership metric and start a passkey roadmap.

Russell Smith

Russell Smith, the Editorial Director at Petri IT Knowledgebase, has over two decades of hands-on experience in IT, in both small business settings and government IT infrastructure projects. Russell started writing for Windows IT Pro Magazine in the early 2000s. Since then, he has contributed insights to various IT publications, including Petri and CDW. His authoritative voice has resonated across industry blogs, where he dissects complex topics into an ‘easy read’. Russell has authored over a thousand articles, each a testament to his depth of knowledge. His expertise doesn’t stop there: he wrote a book on Privilege Management and co-authored another for Microsoft’s MOAC series. Moreover, Russell’s commitment to education shines through in the courses he crafted for Pluralsight. He is also presenter on his own YouTube channel, This Week in IT, and the current presenter of Petri Dish.