For years, the picture most people had of a hacker was someone “breaking in” – exploiting a firewall hole, slipping malware past the antivirus, that sort of thing. That still happens, but more and more the bad guys aren’t breaking in at all… they’re logging in. With your username. And your password. And sometimes even with your MFA.

Think about that for a second. Once an attacker is signed in as you, every security tool that’s looking for “bad stuff” sees… you. Your mailbox, your OneDrive, your Teams chats, your access to the accounting system – all of it is now theirs, and to your other defenses it looks like a normal Tuesday.

A while back I wrote about what happens when defenses fail, and how most security tools don’t tell you when they’ve been bypassed. Identity is where that problem shows up the most today, and it’s why I want to talk about something called ITDR. Read more