Let’s explore two top identity-based attacks — phishing and third-party accounts — and ways organizations can implement cybersecurity best practices to defend against these.
https://www.securitymagazine.com/articles/98147-the-top-identity-based-attacks-and-how-to-stop-them-part-2