Top three findings from Q1 2023 Quarterly Threat Report

The Q1 Quarterly Threat Report highlights identity-based attacks as the predominant threat—account compromise, account takeover (notably against Microsoft 365), and long-lived access key theft—alongside an increase in session-cookie theft enabling MFA bypass and continued exploitation of one- to two-year-old vulnerabilities; the report emphasizes vulnerability prioritization, user education, and SOC response as primary defenses.