Are cybercriminals hacking your systems – or just logging in?

This advisory warns that threat actors increasingly obtain access by stealing credentials, session tokens, and MFA approvals—via phishing, vishing, infostealer malware, brute-force/credential stuffing, third-party breaches, and MFA bypass techniques—citing large-scale impacts such as the ALPHV (BlackCat) attack on Change Healthcare and UNC5537’s Snowflake data theft; it recommends Zero Trust, strong MFA, monitoring, least privilege, employee training, dark-web monitoring, and considering MDR services.