Meet Yossi Barishev, front-line incident responder against nation-state attackers, former security-operations leader inside one of the most targeted companies on earth, and founder building to fix the identity failure the entire industry keeps working around.
(for host intros)
My guest today has spent his entire career on the front line of security, fighting nation-state attackers at CyberArk, Sygnia, and Fireblocks, and walking into Fortune 100 enterprises' worst days as the incident responder who reverse-engineers how elite attackers got in. Across all of it, the same root cause kept surfacing: not exotic zero-days, but identity. So he left to fix it. He's now the founder redefining IAM, with a blunt message for security leaders in the age of AI attackers: identity is the only perimeter left. Please welcome Yossi Barishev.
Biography
Yossi Barishev has spent his entire career on the operational front line of security. He started in Israeli Military Intelligence leading a DFIR team against nation-state adversaries, ran CyberArk’s Global Cyber Defense & Response Center, served as one of Sygnia’s most senior enterprise security consultants, a lead incident responder for Fortune 100 companies and critical infrastructure, and went on to lead security operations, strategy, and innovation at Fireblocks, one of the most targeted environments on earth.
Walking into other people’s worst days, the same root cause kept showing up. The breach was rarely an exotic zero-day. It was identity – an account or a system nobody was really governing. Over time, those stopped looking like separate incidents and started looking like one unsolved problem.
So he left to build for it, co-founding a stealth identity-security company set on fixing IAM from the ground up rather than treating its most expensive symptoms. His thesis is contrarian and practitioner-tested: AI didn’t break identity, it exposed how broken it already was.Â
Resources
Topics
Everyone’s racing to put AI on top of identity. Yossi’s blunt counter-take, earned over years on the response side: AI didn’t create the identity problem, it just made it impossible to ignore. Identity infrastructure has always been fragmented, inconsistent, and held together by manual reconciliation. Now that AI agents act on that data autonomously, the cracks stop being latent and become operational risk at machine speed. He walks hosts through what’s actually broken, why it’s an infrastructure problem and not a tooling gap, and what teams have to fix first.
Listener takeaways:
After years as a lead incident responder, Yossi’s most contrarian observation is that the breaches that hurt most aren’t exotic. Attackers walk in the front door, and the door stays open because fragmented identity stacks can’t apply consistent controls across every system that matters. He reframes security posture around one metric most leaders don’t track: coverage — how much of your estate your controls actually reach.
Listener takeaways:
What keeps identity functioning in most enterprises isn’t modern architecture, it’s people. Skilled practitioners burn their days as the glue between systems that refuse to talk to each other: reconciling CSVs, mapping entitlements, cleaning identity data. Yossi calls this the “human middleware” problem, and he argues it’s where most IAM risk quietly accumulates, invisible in dashboards, fragile during incidents, and impossible to scale.
Listener takeaways: