In fact, less than 10% is spent on eliminating compromised credentials but is where greater than 80% of all breaches originate.Īdmins and security teams are faced with the enormous challenge of keeping a remote and hybrid workforce secure and protected, while also providing a seamless end user experience. Yet the breaches increase as well and the allocation of funds going toward preventing compromised password breaches isn’t proportionate to the problem they pose.

The uptick in security needs to prevent attacks against companies and protect company and customer data, due to remote/hybrid work environments seeing employees working from different locations, has meant enterprise security budgets are increasing. With complex passwords comes a rise in naive users jotting these passwords down in notes to remember their usage of numbers and special characters - a liability on a physical level. Additionally, enforcement only goes so far in terms of password protection. Even with the enforcement of stronger passcodes, server breaches, phishing scams, and brute force attacks can expose passwords and thus, corporate and employee information. What about the fact that 80% of all data breaches involve stolen or weak passwords? Single-word passwords or ones involving personal information are often the most culpable. One of the top security problems for organizations today? Stolen login credentials. Fortunately, most have put in place measures that generally prevent this from happening and demand something far more complex - and yet, over time we have been shown in the data, that it may still not be enough. Even thinking of our users protecting their devices and data with “password123”, “qwerty”, “1234567890”, or is enough to send most into a tizzy and induce panic attacks. Every Info Sec profession has seen the dreaded list that elicits an audible, impulsive groan.

Jamf macos