The Last Login: Professor Kai London on Identity Security When Downtime Is Not an Option
By the Ezeiza Times Technology Desk Professor Kai London — CISO, cybersecurity & AI expert. Credit: professorkailondon.com In transport and finance, the decisive breach rarely looks like an attack. “It looks like a login,” says Professor Kai London , a senior CISO. “An identity — human or machine — that authenticated when it should have been challenged, and could then reach far more than it should.” In always-on operations, he argues, getting identity right is the single highest-leverage security investment. “Every breach begins with a login that should have been stopped. Verify, limit, detect, prove — that is the whole discipline.” Verify Assume every credential may be stolen, London advises, and require phishing-resistant multi-factor authentication and context-aware conditional access. “A password proves someone once knew a secret,” he says. “It does not prove who is at the keyboard now.” Limit Shrink the blast radius: least-privilege access and segmentation so a single co...