The Secure Developer · 2025-09-23 · 31 min
Episode Summary Can multi-factor authentication really “solve” security, or are attackers already two steps ahead? In this episode of The Secure Developer, we sit down with Paul Querna , CTO and co-founder at ConductorOne , to unpack the evolving landscape between authentication and authorisation. In our conversation, Paul delves into the difference between authorisation and authentication, why authorisation issues have only been solved for organisations that invest properly, and why that progress has pushed attackers toward session theft and abusing standing privilege. Show Notes In this episode of The Secure Developer, host Danny Allan sits down with Paul Querna, CTO and co-founder of ConductorOne, to discuss the evolving landscape of identity and access management (IAM). The conversation begins by challenging the traditional assumption that multi-factor authentication (MFA) is a complete solution, with Paul explaining that while authentication is "solved-ish," attackers are now moving to steal sessions and exploit authorization weaknesses.
A Vision For The Future Of Enterprise AI Security With Sanjay Poonen63 / 100
Vulnerabilities In Enterprise AI Workflows With Nicolas Dupont
Retrieval-Augmented Generation With Bob Remeika From Ragie
Securing The Future Of AI With Dr. Peter Garraghan
The Future is Now with Michael Grinich (WorkOS)