Rise in Source IP-Based Authentication Abuse

This report provides concise defensive guidance: move critical applications behind Zero Trust solutions (e.g., ZPA) to minimize attack surface and stop lateral movement; adopt an IdP with FIDO2-based MFA and SSO to centralize and strengthen authentication; and harden help-desk account reset procedures to validate identities and prevent unauthorized access.