Orgs are having a major identity crisis while crims reap the rewards
ID: f166823a-6728-5e40-b8ea-a64dbd9a2f42
STIX ID: report--f166823a-6728-5e40-b8ea-a64dbd9a2f42
Feed Name: The Register (Security)
Threat Score
Industry reports from IBM X-Force and CrowdStrike show a large surge in identity-based intrusions in 2023–2024, with stolen credentials, API keys, session tokens and MFA bypasses becoming dominant initial access methods; compromised cloud credentials and for-sale cloud assets are prevalent, phishing remains common but declined as attackers increasingly log in with valid accounts, and examples include cybercrime extortion by Scattered Spider and credential-phishing operations by Cozy Bear.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.