October is Cybersecurity Awareness Month. As part of our awareness
series, we are sharing the threats that matter most to your organisation
this year and the steps you can take against them.
Attackers have changed how they get into business accounts, and many MFA
setups have not kept up.
The Microsoft Digital Defence Report 2026, published this month, shows
the shift:
- Password attacks declined 26% year over year, while
adversary-in-the-middle phishing and token theft more than doubled in
the first half of 2026 - Phishing accounted for 23% of observed intrusions, up from 7% the
previous year - More than 52% of intrusions involving compromised accounts led to
additional credential theft
In a token theft attack, the criminal does not need the password. They
capture the signed-in session after your employee completes MFA, then
use it as their own. One compromised account then becomes a route to
several more.
Verizon’s 2026 Data Breach Investigations Report confirms the business
impact. Stolen credentials appear in 39% of all breaches, and people
were involved in 62% of breaches.
What you can do about it
Microsoft Entra ID gives you the controls built for this type of attack:
- Phishing-resistant MFA and passkeys that cannot be captured by a
fake sign-in page - Conditional Access with token protection that ties each session to
the device it was issued to - Risk-based policies that block or challenge suspicious sign-ins
automatically - Identity Governance that removes access people, applications, and AI
agents no longer need
The result is fewer compromised accounts, a clear record of who can
access what, and evidence your auditors and regulators can rely on.
Please share this with your IT and security teams so they know what to
look for.
Want to know more about Microsoft Entra ID, or ready to purchase
licences for your organisation? Click the link below or reply to this
email, and one of our security specialists will get back to you.
