Year in Review: Attacks on identity and MFA
Summary: Cisco Talos' 2024 Year in Review reports that valid account usage was the top way attackers gained access last year, and nearly half of identity attacks involved Active Directory. The review also covers common MFA missteps such as missing enrollment and misconfigured policies, and techniques including push fatigue, password spraying, and adversary-in-the-middle campaigns.
Why it matters: Valid credentials, not malware, were the leading entry path in 2024, and nearly half of identity attacks ran through Active Directory - the system most organizations treat as trusted infrastructure.
Read the original at Cisco Talos ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026