"Cybercriminals are increasingly exploiting compromised credentials, software vulnerabilities (including zero-days), and weaknesses in cloud security."