Headline stats from CrowdStrike’s 2026 Global Threat Report hide an important common thread: detection-based identity security is no longer sufficient.