A credential-based attack is an intrusion in which the attacker authenticates with a legitimate, stolen username and password rather than exploiting a software flaw — which means there is no malware signature, no exploit, and no vulnerability to patch at the point of entry. To every identity, network, and endpoint tool watching the login, the…