Almost three-quarters of organisations suffered at least one identity-related breach in the past year, and on average businesses reported three separate incidents, according to a report from cybersecurity firm Sophos. Attacks are driven primarily by human error and weak management of non-human identities, a vulnerability that is growing rapidly as agentic AI accelerates attack processes.

