An attacker attempts to breach an executive's personal laptop, but effective multifactor authentication (MFA) blocks them. Actually, it was only a deterrent. The attacker then discovers that the executive's son did not enable MFA on his gaming console and uses that compromised box to move laterally on the home network to eventually reach the corporate network.

Cybercriminals' increasingly brazen techniques have expanded beyond office walls to target top executives' family members and friends who may not know how to protect themselves. Worse, these people don't even know that the attackers are coming for them. While leadership receives ongoing security awareness training on password hygiene and how to recognize signs of phishing and vishing, those closest to them are still vulnerable. Artificial intelligence (AI) also now offers new tools to exploit them. More here