There’s an expression I’ve used for the past couple of years, starting with my role as founder and CEO at Oort and continuing in my current capacity as Vice President of Product for Identity Security at Cisco: “Why hack in when you can just log in?” That phrase was inspired by a shift in attackers’ behavior towards more complex phishing and social engineering to take over valid accounts and gain access, rather than rely on network infiltration and endpoint exploits.

Source: SC Magazine