Google Cloud Identity

Flare puts 46 percent of corporate stealer-log credentials on likely unmanaged devices

The figure comes from a vendor selling stealer-log monitoring, and no methodology is stated, but it lands on the awkward half of the response: containment on hardware the employer does not own, while the session cookie circulates.