Identity-Centric Threats: The New Reality
The cyberthreat landscape has transformed significantly with identity-based attacks emerging as a dominant threat vector. The 2025 Identity Threat Research Report, "Identity-Centric Threats: The New Reality," presents findings from research conducted by the eSentire Threat Response Unit (TRU) on shifting tactics, how they bypass traditional cybersecurity controls, and implications on organizational security posture. Download your complimentary copy of the report.
What are identity-centric threats?
Identity-centric threats focus on compromising user identities to gain access to valuable organizational assets, rather than exploiting technical vulnerabilities in systems. This shift has led to a significant increase in identity-based attacks, which have risen by 156% between 2023 and 2025, now accounting for 59% of all confirmed threat cases in Q1 2025.
How has Cybercrime-as-a-Service impacted security?
Cybercrime-as-a-Service platforms have transformed the threat landscape by lowering the barrier to entry for cybercriminals. These platforms provide specialized services, such as Phishing-as-a-Service, which allow even those with limited technical skills to execute sophisticated identity theft campaigns. For instance, platforms like Tycoon2FA can be rented for as little as $200-300 per month, making credential theft more frequent and diverse.
What measures can organizations take against identity threats?
Organizations should rethink their security posture by assuming that identities will be compromised. This includes implementing continuous authentication verification, comprehensive credential monitoring, and rapid response capabilities for identity-based threats. Regular threat hunting for unusual sign-ins and modifications to multi-factor authentication methods is also recommended to enhance security.
Identity-Centric Threats: The New Reality
published by ITontology
In our cloud-first, mobile-first world, we are absolutely focused on empowering everyone within the organization. Hardware and software play a significant role in every company, but the primary focus has shifted to employees. Identity and conditional access are at the foundation of data protection, but collaboration is necessary in the Modern Workplace. Low level IT tasks are gone, and budgets have been refocused on securing and protecting data on every device from every location. Organizations that must meet certain compliance requirements have an extra layer of responsibility and accountability.
ITontology was founded to solve these challenges. In our cloud-first, mobile-first world the challenges can be overwhelming. Not to worry, our team and experience will guide you through the digital transformation process and empower everyone within your organization. Our vision, experience and powered 100% by Microsoft will provide best in class technology solutions. The best part, it’s all right at our fingertips and deployment can be automated from the cloud. The technology, security, value, and expense are finally all aligned. The time is now, and we are here to help, so let’s get to work on your digital transformation and turn your business into a Modern Workplace.
Sign in with LinkedIn