Attackers Aren't Breaking In, They're Logging In | Wilfredo Santiago on Sunny's Silver Linings

Attackers are walking through the front door with legitimate credentials, and most MSP security stacks still treat identity as a hygiene checkbox. In this episode of Sunny's Silver Linings, Sunny Kaila sits down with Wilfredo Santiago of Blackpoint Cyber. Wilfredo shares his path from the US Navy to the NSA to the MSP space, then breaks down why identity is now the primary attack surface, why MFA is only the beginning, what separates true managed detection and response from reporting, and how MSPs should approach AI governance. Timestamps 00:00 Welcome 01:45 From hacking video games to the US Navy 04:07 The NSA development program and choosing defense 06:27 The unfair fight and a mission-driven career 08:25 Why every SMB is a target 11:38 Invisible borders and protecting the SMB economy 13:36 Attackers logging in, not breaking in 16:37 Least privilege, just-in-time access, and the Intune example 19:06 Blackpoint's Identity AI agent and machine-speed response 21:50 Why MFA isn't enough, and resilient engineering 24:18 True MDR: the R stands for response 29:03 AI governance, shadow AI, and agents as identities 33:00 Proving zero data retention and blocking unapproved AI 36:13 Where to find Wilfredo Who this is for: MSP owners, security leads, and SMB decision-makers who want to reduce identity risk, evaluate MDR vendors with sharper questions, and put guardrails around AI before it creates new exposure. What you will learn: Why attackers now rely on legitimate credentials, and what continuous identity monitoring looks like How over-provisioned roles like SharePoint admin quietly expand your blast radius Why MFA is a starting point, and how resilient engineering prevents repeat incidents The 2 a.m. Saturday test for judging whether your MDR actually responds How to build an AI governance strategy around asset inventory, risk registers, and treating agents as identities #SunnysSilverLinings #MSP #Cybersecurity #IdentitySecurity #AIGovernance