Expel Quarterly Threat Report volume V (Q1 2024): authentication bypass vulnerabilities

This Q1 Quarterly Threat Report highlights active exploitation of high-severity vulnerabilities in 2024—particularly authentication bypass flaws—citing multiple CVEs observed by the SOC and high exploitation probabilities; it emphasizes the risk of full application and network compromise and provides pragmatic mitigation guidance (asset and vulnerability management, logging, scanning of unmanaged devices) while noting broader trends like AI-enabled social engineering and MFA bypass techniques.