Wow, this is a good article that everyone planning #cybersecurity should read:

“An attacker who compromises a valid credential doesn’t trigger endpoint detection. An attacker who moves from one cloud service to another using legitimate trust relationships doesn’t trip network alerts. An attacker who creates a new automated credential using the permissions of a compromised account doesn’t set off the configuration scanner.”

#ciso #infosec #tools #programmanagement