The Brick House: Breaking Trust — How Attackers Turn Identity Into Access

Identity is the front door and attackers have stopped trying to pick the lock. Rather than defeating authentication outright, they work around it — hijacking live sessions, exploiting over-permissioned SaaS and cloud integrations and manipulating the processes behind access. Once inside, one compromised identity can open a path across SaaS platforms, cloud environments and critical systems.

What makes these attacks work usually isn’t one critical flaw. It’s a chain of small weaknesses that each look harmless on their own: a loose reset process, an over-permissioned account, an unmonitored integration.

Join host Gary Brickhouse and a panel of GuidePoint Security offensive and identity practitioners. They’ll walk through how these attacks play out in real engagements and what security teams can change to stop them.

Key discussion topics:

• How attackers bypass authentication methods through help desk manipulation, vishing and session theft
• The attack paths connecting identities, SaaS platforms, cloud environments and critical systems
• Why individually minor weaknesses become dangerous when chained together
• Using threat-informed red and purple team exercises to test realistic attack scenarios
• Turning offensive findings into coordinated improvements across IAM, cloud, endpoint and SOC teams

Panelists:

• Andre Rosario, Senior Security Consultant
• Steve Graziano, Attack Simulation Engineer
• Ean Meyer, Security Architect
• Derek Melber, Managing Security Consultant, SW

Host:

• Gary Brickhouse, CISO

Attendees are eligible for 1 ISC2 CPE Credit.