Trevor Hilligoss

Overall, sixty-eight percent of organizations experienced an identity-based event during the previous year, which affected organizations averaging eight events.

The findings reflected an attack surface that is expanding well beyond the traditional employee identities and endpoints, according to Trevor Hilligoss, SpyCloud chief intelligence officer and a former FBI and Department of Defense cyber investigator.

"The enterprise attack surface is no longer limited to employees and endpoints.

It now extends across every AI agent, API key, token, service account, vendor, and partner with access to business systems," Hilligoss told Security Info Watch.