Feldman believes AI is revolutionising cybersecurity in three key areas, first, AI-powered automation enhances user experience by streamlining support processes, deployment, and documentation
In a rapidly evolving cybersecurity landscape, identity security has emerged as a critical area of focus. At the recent Impact World Tour (IWT) 2024 in Mumbai, Barak Feldman, Senior Vice President at CyberArk, shared insights on generative AI, identity security, and the evolving nature of cyber threats. In an exclusive conversation, Feldman outlined how AI is transforming security operations and how organisations can better prepare for future challenges.
AI In Cybersecurity: From Automation To Threat Detection
Feldman believes AI is revolutionising cybersecurity in three key areas. First, AI-powered automation enhances user experience by streamlining support processes, deployment, and documentation. However, he emphasised that the real game-changer lies in AI’s ability to detect and mitigate risks in real time.
“We are excited about using AI to not just reduce risk but to actively detect and enforce security policies based on behaviour patterns,” Feldman explained. CyberArk aims to integrate AI into its identity security solutions to track behaviour across different environments, enabling proactive threat mitigation.
AI’s role extends beyond automation—it is also reshaping security strategies by addressing risks associated with machine identities. As organisations increasingly delegate privileged access to AI bots and automated systems, managing these non-human identities becomes a critical challenge.
“The scale is crucial,” Feldman noted. “We now have a massive number of machine identities that require protection. AI-based identities will have significant access, and we must manage their lifecycle effectively.” CyberArk has already made strides in this space, notably with its recent acquisition of Venafi, a leader in machine identity management.
Generative AI & Future Of Identity Security
With the rise of generative AI, organisations must rethink traditional security approaches. Feldman highlighted how identity security has evolved from a static process to a dynamic, AI-driven model.
“In the past, identity management was linear—a user joined an organisation, was assigned access, and that was it,” he said. “With AI, DevOps, and cloud automation, access needs are constantly changing, requiring real-time decision-making.”
CyberArk is now focusing on Zero Standing Privileges (ZSP), an approach where access is granted only when needed and revoked immediately after use. This reduces the attack surface, preventing cybercriminals from exploiting dormant privileges.
“The new world is all about dynamic access provisioning,” Feldman explained. “With AI, we can make access decisions instantly, reducing the attack vector significantly.”
Intersection Of Cybersecurity & IoT
Feldman also touched upon the increasing convergence of cybersecurity and physical security, particularly with the rise of Internet of Things (IoT) devices. While CyberArk primarily focuses on identity security, he acknowledged the growing need for securing automated access in industries like manufacturing and automotive.
“A lot of IoT devices require automated access for software updates, meaning they need secure identities with credentials or certificates,” he said. CyberArk is actively exploring innovations in automated access management for such systems, ensuring that updates and remote access are protected from cyber threats.
Advice For Professionals: Follow Standards, Partner With Digital Teams
With cybersecurity becoming increasingly complex, Feldman offered a piece of straightforward advice—follow regulatory frameworks and partner with digital transformation teams.
“Governments and regulators are innovating just as much as the industry,” he said. “Following established frameworks like Zero Trust and compliance standards helps organisations stay focused and avoid distractions.”
He also stressed the importance of aligning security with business transformation efforts. “The most successful security organisations are those that partner with their company’s digital teams,” Feldman said. “Security shouldn’t be an afterthought—it should be embedded into the digital strategy from the start.”
As AI, machine identities, and automation reshape cybersecurity, organisations must adapt swiftly to safeguard their digital ecosystems. CyberArk, with its deep expertise in identity security and privileged access management, is positioning itself at the forefront of this transformation.
