Credential Re-Use in the Enterprise

The report warns that users often reuse passwords between regular and administrative accounts and that naming conventions (e.g., adding "-adm") make privileged accounts easy for attackers to find. It notes that testing or an attacker can try known user passwords against paired admin accounts and recommends using a script to identify accounts sharing the same password to improve training and remediation.