The boundary that fails is usually the identity one

Two 2025 patterns make the point: OAuth device-code phishing steals tokens that cross tenant and app boundaries, and Salt Typhoon captured TACACS+ credentials to move between networks. The boundary that gives way is rarely the firewall, it is the identity trust between the two sides.

1. Silos trust each other via identity. The real connective tissue between boundaries.
2. How that trust is stolen. Token theft and credential capture in 2025.
3. Controls on both sides. Not assuming either side stays clean.
4. Scoping and short lives. Least privilege and short-lived credentials across the boundary.
5. Detecting cross-boundary abuse. What to watch and where.

A security piece that reframes cross-silo connectivity as an identity problem, which is both accurate and distinctive. It matches the product's identity lens and avoids the hardware cross-domain-solution framing we do not sell.

• Make the case that the failing boundary is identity, not network.
• Use device-code phishing and Salt Typhoon as the twin anchors.
• Insist on controls that assume one side is compromised.
• Reuse anchors from the identity and edge dives coherently.