More than half of cyberattacks in 2024 bypassed traditional security defenses by using legitimate login credentials, rather than exploiting system vulnerabilities, a newly released 2025 Sophos Active Adversary Report revealed. The report, which analysed over 400 cases of Managed Detection and Response (MDR) and Incident Response (IR), revealed that 56