Attacker Dwell Time Increased by 36%, Sophos’ Active Adversary Playbook 2022 Reveals Increase is Due to Exploitation of ProxyLogon and ProxyShell Vulnerabilities, Plus Initial Access Brokers Despite a Drop in Remote Desktop Protocol Use for External Access, Attackers Increased Their Use of the Tool July 5, 2022 News