Top 10 IAM challenges where most security gaps actually happen

A lot of recent breaches seem to come back to identity issues rather than exploits mismanaged access, stale privileges, weak auth, etc. Things like service accounts, over-permissioned users, and lack of context-aware access still feel like blind spots in many setups. What IAM gaps are you seeing m