SysAdmin Magazine

Password spray: the world’s most boring (and effective) attack Password spraying sounds almost… harmless. It’s not. Try common passwords across lots of accounts. Stay under lockout thresholds. Wait for one successful login. That’s it. No zero-days. No Hollywood hacking montage. No Mission Impossible music. Just patience. And it works. A lot. If you’re hearing numbers like “97% of attacks start this way”, that’s not a rounding error. That’s facts we can’t ignore.

Empowering MSPs Through Innovation and Partnership Innovation in data and identity security isn’t just about technology — it’s about empowering partners to deliver smarter, faster, and more secure outcomes for their clients. At Netwrix, innovation begins with our partners, especially Managed Service Providers (MSPs), who are on the front lines of helping organizations stay secure and compliant in an ever-changing threat landscape.

Earlier this week, I sat down with Grady Summers, Paul Stephens, and Whitney Daily to discuss how innovation takes shape inside Netwrix — from modernizing development with AI to rethinking customer experience and cross-team collaboration. Our conversation highlights not only a shared culture of experimentation, accountability, and curiosity but falso that innovation can move sideways as much or more than it does downward.

Years ago, when we first set out to tackle the biggest challenges in data security, things looked different than they do today. Data was spread across distributed file servers and databases within an organization's premises and data centers. Each held small pockets of information that needed to be discovered, scanned, and secured.

For attackers, compromising identity is often more effective than burning zero-day exploits. Legacy configurations in Active Directory still provide opportunities to exploit overly privileged accounts and misconfigured services. A growing trend is the abuse of Active Directory Certificate Services (ADCS), where insecure certificate templates can be leveraged to impersonate domain admins.

Everyone is talking about Microsoft 365 Copilot. The promise is clear: faster answers, smarter workflows, and a boost in productivity. But here’s the catch: Copilot doesn’t know the difference between what people should access and what they simply can access. That means overshared files, over-permissioned identities, and misclassified data can all become fuel for accidental data exposure. AI makes information easier to find, even when it shouldn’t be found.

Published: By Grady Summers Topics covered: Resource centerBlog Netwrix Innovation Week: Netwrix AI – Accelerating Your Path to Data & Identity Security AI is reshaping security, but CISOs must weigh automation gains against risks like privacy gaps and “black box” decisions. During this episode of our Netwrix Innovation Week podcast series, we discuss how AI is built into our platform with MCP integration and remediation playbooks to help you gain faster insights and eliminate sources of risk.

At Netwrix, we work with customers thar range from small-to-medium sized businesses and municipalities all the way up to the largest global 2000 organizations and national governments.

AI is creating a new level of urgency for organizations to understand where their sensitive data is and who has access to it – whether human, machine, or AI agent. Attackers are using AI to probe for vulnerability, and identities are the weak links on the way to a data breach. Organizations are also discovering internal blind spots as AI agents surface sensitive data they thought was locked away from employees’ eyes.

Frisco, TX, September 18, 2025 share: Share Share Tweet AI is accelerating identity-based attacks, driving steep financial impact across the healthcare sector. Netwrix, a cybersecurity provider focused on data and identity threats, today released new findings from its 2025 Cybersecurity Trends Report that reveal sharp increases in cyberattack-related losses across the healthcare sector.