The recent LAPSUS$ hacks show that the original APT, Advanced Persistent Teenagers, is alive and well and IN UR B0XX3N. These kids had about $20K in funding and ripped through Okta and Microsoft software. The big takeaway: multiple layers of security are needed and identity must always be checked, double-checked, and limited in access. Identity+Location is emerging as a new perimeter in security.