Attackers exploit vulnerabilities or misconfigurations to gain higher levels of system access than originally allowed.
Why it matters:
- Critical step in many breaches — attackers go from “guest” to “admin.”
- Allows full control of systems and data.
- Single biggest factor in large breaches.
- Often follows initial account compromise.
Pro tip: Keep software patched and implement least privilege to limit damage. Use least privilege, just-in-time access, and regular permission reviews.
Synonyms:
Identity Escalation