Report finds shift toward identity-based cyberattacks

Infosecurity Magazine reports that accelerated breaches, automation, and converging cyber tactics were observed to be prevalent last year as threat actors shifted toward identity-based attacks.

Identity breaches have become the leading initial attack vector, surpassing vulnerability exploitation, according to a Darktrace report. Exploitation also frequently took place prior to public disclosure, and Common Vulnerabilities and Exposures rose by over 20% year-over-year. Additional findings showed that over 32 million high-confidence phishing emails from incidents across its customer base worldwide. Majority of the attacks bypassed standard protections, with 70% passing DMARC authentication. Many of the malicious emails also targeted VIPs, included malicious QR codes, and originated from newly registered domains.

Regional patterns also varied. Europe experienced cloud- and email-focused intrusions, Africa flagged rising ransomware, Asia-Pacific reported AI-driven threats, and Latin America saw malware following credential theft. The findings highlighted the need for dynamic, real-time identity security to control access and reduce possible harm once inside organizations.