This article is part of a series that aims to educate cyber security professionals on the lessons learned by breach victims. Each lesson will include simple recommendations, many of which do not require organizations to purchase any tools. According to the Sophos Active Adversary Playbook 2021, the use of valid accounts (via a user name and password) … Continue reading Hindsight #4: Prevent threat actors getting (and using) your passwords