2023 Great eXpeltations report: top six findings

**Expel Great eXpeltations (2022) — executive summary:** The SOC annual report highlights that business email compromise (BEC) represented ~50% of incidents (mostly targeting Microsoft 365), credential-harvesting phishing made up 88% of malicious email submissions, adversaries employed AiTM phishing (Evilginx2) to bypass MFA, attackers targeted Workday for payroll fraud, and 11% of incidents could have led to ransomware if not interrupted; the report includes prevalence statistics and mitigation advice such as enforcing MFA, using FIDO2/certificate-based auth, and implementing approval workflows.