Nearly One in Three Cyber Attacks In 2023 Involved The Abuse of Valid Accounts

IBM X-Force reports that in 2023 the abuse of valid credentials became the leading initial access vector, appearing in 30% of incidents and driven by the widespread availability of cloud account credentials on the dark web; while observed phishing compromises declined due to stronger defenses, the rise of generative AI is expected to accelerate and scale phishing, underscoring the need for robust identity controls and security awareness training.