Azure Active Directory

ShinyHunters affiliates escalated one stolen token to full cloud admin in about three hours

Anthropic's December-to-August threat report says none of the intrusions it disrupted used a novel technique. Stolen credentials and unpatched edge devices opened the doors, at machine speed, for single operators.