IT security has traditionally been about keeping threat actors out and preventing breaches. However, while the volume of software vulnerabilities has gone up and up over the past few years, the biggest risk that many companies face is not about a hacker getting in. Instead, it is how long they can stay inside and how far they can move within that network.
The reason why threat actors can move laterally is how difficult it is to manage identities effectively. Identities and credentials are used all the time to allow access, but they also serve as ways to support provisioning and software deployment processes. Simple software tokens that can make life easier for staff are targeted for the access and permissions that they provide.
