Account Takeover - GoKawiil

Prophet Security: Identity attacks drove half of confirmed threats in Q2 2026

Prophet Security analyzed every alert across customer environments from May to July 2026, rather than only alerts analysts chose to escalate. Of the incidents fully investigated, 93% were benign and 7% were confirmed malicious, with identity-related attacks accounting for roughly half of that malicious activity. The firm identified session hijacking, token replay, MFA bypass, credential stuffing, and phishing as the dominant attack patterns.

bleepingcomputer.com · 2026-09-10

Attackers Bypass MFA by Targeting Help Desk Account Recovery Processes

Security researchers note that as MFA, conditional access and device trust make direct credential theft harder, attackers are shifting focus to account recovery workflows. Instead of stealing a user's second authentication factor, criminals are tricking service desk staff into resetting or reassigning it on their behalf.

bleepingcomputer.com · 2026-09-09