Sponsored by

eBook

Identity Resilience: Closing the Gaps Attackers Rely On

Identity has become the fastest way into a business, and the access it gives rarely looks like an attack. Huntress' own data shows more than 78% of incidents now involve identity-based techniques. This ebook traces how attackers hijack identities: phishing that still leans on routine admin, with e-signature requests, invoice notices and voicemail alerts the top lure themes of 2025 and Microsoft impersonated in 31.6% of the phishing emails Huntress analyzed; session tokens stolen from the browser that skip the MFA prompt entirely; and business email compromise, which the FBI puts at $55 billion in losses. It also shows how many gaps are self-inflicted. Across the thousands of Microsoft 365 tenants Huntress evaluated, 60% were missing more than half of its recommended security controls, 66% lacked recommended MFA configurations and 59% had admin accounts without proper restrictions, while Microsoft puts the average time from intrusion to lateral movement at 48 minutes. It closes with what an identity resilience strategy needs in order to treat all of it as one connected problem.