
Football-themed passwords remain a predictable weakness in enterprise environments. Drawing on analysis of more than 6.4 billion compromised passwords, this article explores how attackers exploit familiar patterns, where native Active Directory policy falls short, and how stronger controls can help organizations block weak and breached passwords before they create risk