Who’s logging in?

This is an introduction to a podcast episode where hosts discuss the Sophos Active Adversary Report 2026, highlighting high-level trends: compromised credentials and MFA gaps continue to drive incidents, attackers are operating faster and often after hours, and a growing number of threat groups is increasing complexity for defenders.