Identity-Based Attacks Overtake Software Exploits as Primary Ransomware Vector — Sophos Global Report

Sophos has published research across seven articles confirming that credential and identity-based attacks have surpassed software vulnerabilities as the dominant ransomware entry point. For contact-center and knowledge-worker operations in Denver and affiliated hubs, this is directly relevant given the high density of seats and the already-open HOLLOWGRAPH incident targeting Microsoft 365 identity infrastructure in Dallas-Fort Worth. Operations leaders should confirm MFA enforcement, privileged-account audits, and phishing-resistant authentication are in place across all sites, particularly for remote and hybrid knowledge workers.