Compromised non-human identities are increasingly being leveraged by attackers to gain initial access and as a vector for lateral movement. Microsoft, Cloudflare, and Dropbox are just a few of the companies that have fallen victim to this growing threat this year. In this blog post, we focus on the attack vectors involved and on what actions companies must take to prevent these attacks.