About this episode

The episode discusses the impact of sloppy identity practices on major cybersecurity breaches in 2025.

Discussion on how sloppy identity practices made 2025 breaches worse 2025 delivered zero-day nightmares: SharePoint RCE, Oracle EBS privilege escalation, VMware vCenter remote code execution — all exploited in the wild. But the real catastrophe? Sloppy IAM. Overprivileged accounts, ghost users, and orphan access turned surgical strikes into enterprise-wide meltdowns. One compromised admin in VMware? Full domain takeover. One stale Oracle account? Financial data exfiltrated. Join Garret Grajek...

People in this episode

Host: Garret Grajek

Guest: Darrick Richardson

Topics covered

• identity access management
• cybersecurity breaches
• zero-day vulnerabilities
• overprivileged accounts
• data exfiltration
• enterprise security

Keywords

• identity access management
• zero-day vulnerabilities
• cybersecurity
• data breaches
• overprivileged accounts
• financial data exfiltration

Mentioned in this episode

Organizations: SharePoint, Oracle EBS, VMware vCenter

More episodes of #AuditTuesday GRC Podcast

• Let's talk to The GRC Recruiter - #AuditTuesday w/ Pete Strouse · April 7, 2026 · 36 min
• Time for an Identity Risk Assessment w/ Neil Chapman, Ph.D., and IntraSystems · March 24, 2026 · 40 min
• 2026 DORA Audits: What Regulators Will Expect with Ralf Menegatti · March 10, 2026 · 44 min
• #AuditTuesday - AI Governance in 2026 w Reliath AI · February 24, 2026 · 1h 1m
• Finding (and Auditing) Those Microsoft Share Files w/ Alan Sugano · February 17, 2026 · 35 min
• #AuditTuesday - Executing SCuBA Compliance, featuring Jason Dunn-Potter (CW5-R) and Allgress · January 27, 2026 · 57 min

Explore listener stats, chart rankings, contacts and more on the #AuditTuesday GRC Podcast podcast page.