An estimated 85% of Web application attacks used stolen credentials in 2021, Verizon’s annual “Data Breach Investigations Report” Microsoft estimates that 70% of attacks start with phishing, another identity-focused attack. Microsoft claims to have blocked almost 26 billion identity attacks attempts in 2021. As companies move to multiple cloud platforms, attackers are “exploiting the seams between clouds” and looking for weaknesses presented by the massive surge in workload identities. Most companies have more machine identities than employees, yet they don’t have good visibility into what those workloads are doing.”]
Source: https://www.darkreading.com/cloud/identity-attacks-threaten-workloads-not-just-humans