Typical severity: High. Likelihood of attack: High. An adversary tries known username/password combinations against different systems, applications, or services to gain additional authenticated access. Credential Stuffing attacks rely upon the fact that many users leverage the same username/password combination for multiple systems, applications, and services.
Leverage multi-factor authentication for all authentication services and prior to granting an entity access to the domain network. | Create a strong password policy and ensure that your system enforces this policy. | Ensure users are not reusing username/password combinations for multiple systems, applications, or services. | Do not reuse local administrator account credentials across systems. | Deny remote use of local admin credentials to log into domain systems.