Simple measures such as strong authentication, credentials protection and encryption would have blocked such an attack and many other of the recent breaches in the news. stolen passwords are one of the most common ways adversaries propagate through the enterprise to steal critical data.