Welcome to the party, pal!
Summary: In Cisco Talos' final Threat Source newsletter of 2024, the author recounts giving family members hardware security tokens for multi-factor authentication, an effort that produced only a 30% adoption rate nearly a year later. The newsletter also cites valid accounts as the most observed means of initial access for the fourth consecutive time in over a year, notes that more than 20% of the world's top 100 websites support passkeys according to the FIDO Alliance, and reports that Germany's BSI blocked communication for roughly 30,000 Android IoT devices sold with BadBox malware preinstalled.
Why it matters: Valid accounts have been the top initial-access vector for the fourth consecutive time in over a year, and the author's own household adoption of hardware tokens stalled at 30% - a reminder that the control most likely to stop identity-based attacks is the one users quietly decline.
Read the original at Cisco Talos ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026