Identity-based attacks are surging as remote and hybrid work becomes the norm and artificial intelligence (AI) super-charges threats. In the past year alone, weak identity controls played a meaningful role in 90% of cyber incidents, with attackers leaning on the area as the most reliable entry point and mechanism for lateral movement, according to Palo Alto Networks’ Global Incident Response Report 2026.