Identity-focused attacks remain the most vulnerable entry point to an organization

… they conducted in 2022 “at the request of a large critical infrastructure organization with multiple geographically separated sites.”.