Identity-based attacks including credential theft, MFA fatigue, and session hijacking now account for 72% of confirmed enterprise breaches in 2025, according to new research.
Security leaders are responding by investing in phishing-resistant MFA, continuous authentication, and identity threat detection and response platforms.