Hackers Exploit Compromised Enterprise Identities at Industrial Scale, Warns SentinelOne

SentinelOne's 2026 Annual Threat Report warns of a “mass‑marketed impersonation crisis” as attackers increasingly exploit legitimate enterprise accounts and identity systems at industrial scale—using social engineering, MFA bypass kits and fake employee personas (including AI deepfakes) to gain stealthy access; the report cites cases of admin account compromise that disabled MFA protections and tracks over 1,000 job applications and ~360 fake personas linked to North Korean operations, recommending a shift to continuous post‑authentication behavioral monitoring.