Threat actors are recruiting the people who hold cloud logins (opens in new tab)

Companies keep most of their data and applications in cloud platforms that anyone can reach with the right login. That setup turns each employee holding those credentials into a security variable, and members of the cybercrime underground have built methods to reach those people. Intel 471 tracked this activity into 2026 and sorted insider risk into three categories that cloud-reliant organizations contend with. Three kinds of insiders The work divides insiders into negligent, manipulated, an...